AccidentalEducationEducationMisdeliveryCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Fall Mountain Regional School District
bd_ae6ffa1224e6a77d · schema v1 · pii pii-v1
Full breach record for Fall Mountain Regional School District →On November 5, 2024, Fall Mountain Regional School District inadvertently disclosed sensitive personal information—including first name, last name, and Social Security numbers—to an unauthorized third party. The breach affected 613 individuals total, with 2 Maine residents impacted. The district launched an internal investigation, enhanced security practices, and offered 12 months of Experian IdentityWorks credit monitoring. Consumer notifications were sent on March 3, 2025.
Maine clockDiscovered Nov 5, 2024 → Filed with AG Mar 12, 2025127d ✗ ME AG >90d18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7ed9ba1b588be4dbMaryland State AGfiled 2025-03-12Verified
- bd_9cd6cdd401b14213New Hampshire State AGfiled 2025-03-12Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3e785ba7-31f4-48c5-9d10-cc25e3b13fab.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2025
- Raw hash
- fefa7858e623f6238b2540e3c100a5b3c4c82466e12b617b36bac39c77ea4631
Reporting entity
- Name
- Fall Mountain Regional School Districtnorm: fall mountain regional school district
- Industry
- Education
Victim entity
- Name
- Fall Mountain Regional School Districtnorm: fall mountain regional school district
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Nov 5, 2024
- Materiality determined
- —
- Notification sent
- Mar 3, 2025
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Misconfiguration
- Regulator citations
- Maine Attorney General notification filed
Compliance
- Time to disclose
- 18 weeks(127 days from discovery to filing)
- Compliance flags
- ME AG >90d · 127dME resident >60d · 118d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 5, 2024→ Filed with AG: Mar 12, 2025127d 90 days ME AG >90d Maine Discovered: Nov 5, 2024→ Notified: Mar 3, 2025118d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.