AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDPIIMediumContained

Cumberland County Board of Education

bd_ba735bbc9edabd8a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 6, 2026

Filed

Jun 29, 2026

To disclose

20 weeks

Affected

1state residents only

Confidence

68%

Full breach record for Cumberland County Board of Education →

Cumberland County Board of Education disclosed a data security incident involving the inadvertent disclosure of personal information to a third party. The Board determined the disclosure on February 6, 2026, following an investigation with external cybersecurity professionals. No evidence of misuse was found. The Board offered 24 months of complimentary credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d20 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 20 weeks / 143 days

Feb 6, 2026

Discovered

Jun 29, 2026

Filed

vs. sector median

+10 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Cumberland County Board of Education
norm: cumberland county board of education

Name: Cumberland County Board of Education
norm: cumberland county board of education
Industry: Governmentllm

Discovered: Feb 6, 2026
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Misconfiguration
MITRE ATT&CK: T1567 Deceive via Web or Social Media

During the incident: Took steps to secure our systems
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Offering a complimentary 24-month membership of Epiq - Privacy Solutions ID
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(143 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1054-cumberland-county-board-of-education/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2026
Raw hash: da8508a7592848d691473f4caf19d0eb65d20f5623034212d316f3dd640e417e

Reporting entityCumberland County Board of Education

Victim entityCumberland County Board of Education

Incidentdiscovered Feb 6, 2026

Stated responseTook steps to secure our systems

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov