HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Tucson Unified School District
bd_c7c4fe71fa42161e · schema v1 · pii pii-v1
Full breach record for Tucson Unified School District →Tucson Unified School District notified consumers of a January 2023 cyber incident involving unauthorized network access. The breach may have exposed names. TUSD contained the threat, engaged forensic investigators, and offered IDX identity theft protection services. No evidence of misuse was found at the time of notice.
Vermont clock✗ VT AG >45 bday31 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 195 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_69f37fdd1fab1753Leak Siteblacksuitfiled 2023-02-10(195d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_00f8f98f599766d1Montana State AGfiled 2023-08-25Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-25-tucson-unified-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 25, 2023
- Raw hash
- 72c429515a78eba42f96b5c50bc2388d10008d0f7c5c188f7f1f4a5b34461b31
Reporting entity
- Name
- Tucson Unified School Districtnorm: tucson unified school district
Victim entity
- Name
- Tucson Unified School Districtnorm: tucson unified school district
Incident
- Discovered
- Jan 20, 2023
- Materiality determined
- —
- Notification sent
- Aug 25, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 31 weeks(217 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.