HackingEducationEducationDelayed DiscoveryPIIIdentity (basic)LowContained

Middleton-Cross Plains Area School District

bd_b20fae5f7da6f017 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 24, 2024

Filed

Jul 16, 2024

To disclose

20 weeks

Affected

5state residents only

Linked

5 filings

Confidence

67%

Full breach record for Middleton-Cross Plains Area School District →

Middleton-Cross Plains Area School District (MCPASD) notified the NH Attorney General of unauthorized access to its network discovered on February 24, 2024. An investigation concluded on June 13, 2024, that personal information of approximately 5 New Hampshire residents may have been accessed. The data included full names. MCPASD secured the network, engaged forensic professionals, and offered credit monitoring to affected individuals. Notices were sent starting July 12, 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 143 days

Feb 24, 2024

Discovered

Jul 16, 2024

Filed

vs. sector median

+12 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_4c52214e3561999b2024-07-12 · +4dVerified
Montana State AGbd_87145c5c0646d7ff2024-07-12 · +4dCandidate
Indiana State AGbd_ddb1ffc76ba5ed392024-07-12 · +4dVerified
Vermont State AGbd_f0d8298ce6656cac2024-07-12 · +4dVerified

Name: Middleton-Cross Plains Area School District
norm: middleton cross plains area school district

Name: Middleton-Cross Plains Area School District
norm: middleton cross plains area school district
Industry: Educationllm

Discovered: Feb 24, 2024
Materiality determined: —
Notification sent: Jul 12, 2024
Affected individuals: 5state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unknown
Regulator citations: Notified the New Hampshire Attorney General's Office

During the incident: Took immediate steps to secure the network and mitigate against any additional harm
Engaged external cybersecurity professionals experienced in handling these types of situations to conduct an investigation
Providing the affected residents with notification of this incident
Offering the affected residents whose information was potentially impacted by the incident with complimentary credit monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(143 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGJul 12 · first

Montana State AGJul 12 · first

Indiana State AGJul 12 · first

Vermont State AGJul 12 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/middleton-cross-plains-area-school-district-20240716.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2024
Raw hash: 778e2aa1ca14e0b1ea78b5dfbbcce146efe9af838ed9fb9355f544818719cae8

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMiddleton-Cross Plains Area School District

Victim entityMiddleton-Cross Plains Area School District

Incidentdiscovered Feb 24, 2024

Stated responseTook immediate steps to secure the network and mitigate against any additional harm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov