AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumResolved

North Colonie Central School District

bd_b622a85f4326ecbd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2018

Filed

Jul 2, 2018

To disclose

26 days

Affected

1state residents only

Confidence

64%

Full breach record for North Colonie Central School District →

North Colonie Central School District inadvertently posted a request for quotation for employee term life insurance on its website from March 26 to May 4, 2018. The document contained unredacted names, dates of birth, and Social Security numbers of retirees. The District discovered the error on June 6, 2018, removed the file, and offered one year of Experian IdentityWorks to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 72 days

discovery → filing · 26 days

Mar 26, 2018

Begins

Jun 6, 2018

Discovered

Jul 2, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: North Colonie Central School District
norm: north colonie central school district

Name: North Colonie Central School District
norm: north colonie central school district
Industry: Governmentllm

Discovered: Jun 6, 2018
Breach occurred: Mar 26, 2018 – May 4, 2018
Undetected for: 72 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 1, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1535 Unused/Unsupported Cloud Storage

During the incident: Removed the information from our website
Offering a complimentary one-year membership of Experian’s IdentityWorks
Changes made: Reviewing internal policies and data management protocols
Implemented enhanced security measures to help prevent this type of incident from recurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2018/NorthColonieCentralSchoolDistrict.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 2, 2018
Raw hash: 6fe2c4d9c8230d1ce9db6021445b00718b122831c894c95ad2e3a038f2b24fb1

Reporting entityNorth Colonie Central School District

Victim entityNorth Colonie Central School District

Incidentdiscovered Jun 6, 2018

Stated responseRemoved the information from our website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov