HackingEducationEducationCustomer Data InvolvedTargetedIdentity (basic)Government IDHealth (basic)CredentialsMediumContained

York County School of Technology

bd_c375f51109580aff · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 27, 2023

Filed

Apr 8, 2024

To disclose

13 months

Affected

1state residents only

Linked

6 records

Confidence

64%

Full breach record for York County School of Technology →

York County School of Technology notified the NH AG of a network security incident affecting one NH resident. Unauthorized access occurred on or about March 27, 2023, involving PII, SSN, driver's license, and health data. Notification sent April 5, 2024. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d13 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 13 months / 378 days

Mar 27, 2023

Begins

Mar 27, 2023

Discovered

Apr 8, 2024

Filed

This filing is one of 6 records about the same incident.View merged incident

A leak claim by karakurt about this victim was first seen 329 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitekarakurtbd_6b8745b466949cb42023-05-15 · +329dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_0bf6ba22e1b9adfb2024-04-05 · +3dVerified
Vermont State AGbd_343cc6ae8c6825d62024-04-05 · +3dVerified
Massachusetts State AGbd_029515fdef8ae7b92024-04-04 · +4dVerified by operator
Maine State AGbd_48ac0ef03c6dae912024-04-04 · +4dVerified

Name: York County School of Technology
norm: york county school of

Name: York County School of Technology
norm: york county school of
Industry: Educationllm

Discovered: Mar 27, 2023
Breach occurred: Mar 27, 2023 – Apr 26, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 5, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Credentials
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Partnered with cybersecurity experts
Conducted a thorough investigation
Offering complimentary credit monitoring
Advised affected residents to remain vigilant in reviewing financial account statements
Advised affected residents about the process for placing a fraud alert and/or security freeze on their credit files
Provided contact information for consumer reporting agencies and the Federal Trade Commission
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(378 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGApr 4 · first

Maine State AGApr 4 · first

Indiana State AG+1d

Vermont State AG+1d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/york-county-school-technology-20240408.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2024
Raw hash: e05b661bf7d3f6e91a9179a85e71b6e24187f80776c80cdcf80daf28b72e4d77

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityYork County School of Technology

Victim entityYork County School of Technology

Incidentdiscovered Mar 27, 2023

Stated responsePartnered with cybersecurity experts

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov