Lexington & Richland County School District Five
bd_d3edcdf75cb2f6bf · schema v1 · pii pii-v1
Full breach record for Lexington & Richland County School District Five →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Bonuses for Lexington-Richland School District Five employees delayed due to cyberattack, district says. Lexington-Richland School District Five: The Lexington-Richland School District Five suffered a major cyberattack, which delayed retention bonuses for employees. The district launched an investigation and is working with law enforcement and third-party specialists to determine the nature and extent of the incident. Employees were informed that retention payments will not be made on June 6, 2025, as planned. Linked ransomware group: interlock.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jun 5, 2025
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteinterlockbd_0114b40927dd64572025-06-24 · +19dVerified by operator
Regulatory filings (5) · sorted by filing gap
- Indiana State AGbd_3a3e2413d556ce502025-08-29 · +85dVerified
- Nebraska State AGbd_d7b5f2161da039db2025-08-29 · +85dVerified by operator
- Maine State AGbd_a60809c6d9840e292025-09-02 · +89dVerified by operator
- Vermont State AGbd_ae83edfce1761d092025-09-02 · +89dVerified
Show 1 more filing ↓Show fewer ↑up to 90d gap
- South Carolina State AGbd_5b524b62ca4f7b552025-09-03 · +90dVerified
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Jun 5, last Sep 3 (SC) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
interlock
According to ransomware.live, Interlock is a ransomware group first observed in September 2024 that targets critical infrastructure sectors including healthcare, government, education, and technology across North America and Europe using double-extortion, with 57+ claimed victims including a major US dialysis provider exposing over two million patient records.