HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedMulti-Stage ChainIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
York County School of Technology
bd_c375f51109580aff · schema v1 · pii pii-v1
Full breach record for York County School of Technology →York County School of Technology (NH) reported a data breach occurring between March 27 and April 26, 2023. Cyber criminals gained unauthorized access to the network and exfiltrated private information, including SSNs, driver's license numbers, and financial account data, affecting approximately 12,000 individuals. The school notified the NH DOJ and Vermont AG, engaged forensic investigators, and provided credit monitoring to affected individuals.
Leak gap clock✗ Leak >180d50 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12,000 affectedView incident
A leak claim by karakurt about this victim predates this filing by 329 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/york-county-school-technology-20240408.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2024
- Raw hash
- bcf6e896536a12b9e5cd216143785d341d62c523bc32ab8bec53fc47b905a972
Reporting entity
- Name
- York County School of Technologynorm: york county school of
Victim entity
- Name
- York County School of Technologynorm: york county school of
Incident
- Discovered
- Apr 26, 2023
- Materiality determined
- —
- Notification sent
- Apr 5, 2024
- Affected individuals
- 12,000
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of JusticeNotified Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 50 weeks(348 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.