DisclosureLens
GLOBALUnknownRansomwareMedusaLow

Traverse City Area Public Schools

bd_ccf4838e1d945d0a · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Mar 31, 2024

To disclose

Affected

Not disclosed

Linked

9 filings

Confidence

60%
Full breach record for Traverse City Area Public Schools

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

Traverse City Area Public Schools close for cyber breach investigation. Traverse City Area Public Schools: The public schools in the Traverse City area closed on Monday to investigate a cyberattack that disrupted their network and access to certain systems. The administration responded by immediately disconnecting the network and engaging a specialized cybersecurity firm to secure the environment and conduct a thorough investigation. Classes were canceled for Monday, April 1, 2024, with the possibility that the closure could extend until Tuesday. Linked ransomware group: medusa.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Mar 31, 2024

Press report

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

Compliance clock

Not assessable

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 484d gap

Filing propagation · 7 filings · 5 states

View merged incident ↗

Pattern: first filing Mar 28, last Jul 28 (NH) — a 487-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2023-01-11

medusa

According to ransomware.live, Medusa is a ransomware-as-a-service operation active since June 2021 that has targeted over 300 victims across critical infrastructure sectors including healthcare, education, legal, and manufacturing using double-extortion, with attacks surging 42% between 2023 and 2024 and a formal CISA advisory issued in early 2025.

565 tracked hereFull profile →