HackingEducationEducationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Minneapolis Public Schools

bd_c3a500621ad44f58 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 18, 2023

Filed

Sep 5, 2023

To disclose

28 weeks

Affected

6state residents only

Linked

8 records

Confidence

66%

Full breach record for Minneapolis Public Schools →

Minneapolis Public Schools (MPS) notified New Hampshire residents of a data breach occurring between February 6 and 18, 2023. Unauthorized access was gained to MPS computer systems. The breach impacted approximately 6 New Hampshire residents, involving personal information and government identifiers. MPS reported the incident to law enforcement, conducted an investigation, and provided 24 months of free credit monitoring through Experian to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d28 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 12 days

discovery → filing · 28 weeks / 199 days

Feb 6, 2023

Begins

Feb 18, 2023

Discovered

Sep 5, 2023

Filed

This filing is one of 8 records about the same incident.View merged incident

A leak claim by medusa about this victim was first seen 182 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_524a24e43eef86032023-02-17 · +200dVerified by operator

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_0b239d4c54fc48822023-09-05Verified by operator
Indiana State AGbd_11a17eb8da1f746e2023-09-05Verified
Massachusetts State AGbd_371bdf2738cff1e12023-09-05Verified by operator
Vermont State AGbd_965f8261736818942023-09-05Verified

Show 1 more filing ↓

Maine State AGbd_b96dbece1633723d2023-09-05Verified by operator

Press reports (1)

Pressmedusabd_f3c4fb86814cf4742023-02-17 · +200dCandidate

Name: Minneapolis Public Schools
norm: minneapolis public schools
Domain: mpls.k12.mn.us

Name: Minneapolis Public Schools
norm: minneapolis public schools
Domain: mpls.k12.mn.us
Industry: Educationllm

Discovered: Feb 18, 2023
Breach occurred: Feb 6, 2023 – Feb 18, 2023
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 5, 2023
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: notified federal law enforcement
Initial access: exploit_public_facing

During the incident: Reported the event to law enforcement
Commenced an investigation
Implemented additional safeguards and training
Providing access to credit monitoring services for twenty four (24) months through Experian
Changes made: Policies and procedures regarding information security are being reviewed and enhanced
Additional safeguards have been implemented
Additional training is being conducted
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(199 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGSep 5 · first

Indiana State AGSep 5 · first

Massachusetts State AGSep 5 · first

Vermont State AGSep 5 · first

Maine State AGSep 5 · first

New Hampshire State AGSep 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/minneapolis-public-schools-20230905.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2023
Raw hash: 4699b800bd46cef7aa46fbacddf2dc11c96d5bb90a8fa5281b367081ac496a56

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Press reports (1)

Reporting entityMinneapolis Public Schools

Victim entityMinneapolis Public Schools

Incidentdiscovered Feb 18, 2023

Stated responseReported the event to law enforcement

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov