HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICHEALTH_BASICLowActive
Shelley School District No. 60
bd_cdb6a1327584158e · schema v1 · pii pii-v1
Full breach record for Shelley School District No. 60 →Shelley School District No. 60 (Idaho) notified the Attorney General on January 16, 2025, that it was impacted by the worldwide PowerSchool cybersecurity attack. The breach occurred between Dec 19-23, 2024, when threat actors used compromised credentials to access PowerSource and extract data from the Student Information System. Potentially affected data includes names, contact info, and health/safety data of students, staff, and families. The District is analyzing exposure and working with external experts.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-16-2025-Shelley-School-District-No.-60.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 16, 2025
- Raw hash
- 4f6982226b6c5af554b487bf449f4590d459d9e4d5c0b5c07535bccf69259417
Reporting entity
- Name
- Shelley School District No. 60norm: shelley school district no 60
Victim entity
- Name
- Shelley School District No. 60norm: shelley school district no 60
Incident
- Discovered
- Jan 16, 2025
- Materiality determined
- —
- Notification sent
- Jan 16, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Idaho Attorney General Consumer Protection Division
- Initial access
- valid_credentials
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.