HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Portland Public Schools
bd_c67522245a0e6714 · schema v1 · pii pii-v1
Full breach record for Portland Public Schools →Portland Public Schools notified the NH Attorney General of unauthorized network access occurring on or about February 2, 2025. Investigation determined on January 6, 2026, that names and Social Security numbers of 23 NH residents were accessed. PPS provided notification on January 30, 2026, and offered complimentary credit monitoring.
Leak gap clock✗ Leak >180d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 396 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_24c550503f100c93Maine State AGfiled 2026-01-30(6d gap)Candidate
- bd_7d0298ae14e91fecIndiana State AGfiled 2026-01-30(6d gap)Verified by operator
- bd_c089e457a397121dVermont State AGfiled 2026-01-30(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/portland-public-schools-20260205.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 5, 2026
- Raw hash
- f97598e103671535801427c5d0a34775f02c4288e07ccb54201beb812c5370b7
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Portland Public Schoolsnorm: portland public schools
- Domain
- portlandschools.org
- Industry
- education
Incident
- Discovered
- Jan 6, 2026
- Materiality determined
- —
- Notification sent
- Jan 30, 2026
- Affected individuals
- 23
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notification to New Hampshire Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.