DisclosureLens
HackingEducationEducationCustomer Data InvolvedGovernment IDCriticalContained

Mansfield Independent School District

bd_bca1adeb5513d61c · schema v1 · pii pii-v1

Severity

Critical

Discovered

Sep 7, 2022

Filed

Sep 14, 2022

To disclose

7 days

Affected · nationwide

129,5933 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Mansfield Independent School District →

Mansfield Independent School District, an educational institution, reported an external system breach (hacking) that occurred between January 27, 2022, and August 22, 2022. The breach was discovered on September 7, 2022. The compromised information includes names and driver's license or non-driver identification card numbers. The district notified affected individuals on September 14, 2022, and offered 12 months of credit monitoring and identity restoration services through Experian. Three Maine residents were among the 129,593 total individuals affected.

Maine clockDiscovered Sep 7, 2022 → Filed with AG Sep 14, 20227d ✓ ME AG ≤30d7 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 223 days
discovery → filing · 7 days

Jan 27, 2022

Begins

Sep 7, 2022

Discovered

Sep 14, 2022

Filed

vs. sector median

8 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 3 states

View merged incident ↗
Massachusetts State AGSep 14 · first
Indiana State AGSep 14 · first
Maine State AGSep 14 · first · this page
Maine State AG+26d

Pattern: first filing Sep 14 (MA), last Oct 10 (ME) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.