HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIALHEALTH_BASICMediumContained
Reynolds School District
bd_d9234944dce33249 · schema v1 · pii pii-v1
Full breach record for Reynolds School District →Reynolds School District notified Maryland AG of a data incident involving third-party vendor Carruth Compliance Consulting. Unauthorized access to personal information (SSN, driver's license, financial, medical billing) occurred approx. Dec 21, 2024. 5 Maryland residents affected. FBI notified. Remediation includes credit monitoring via IDX.
Maryland clock⏱ MD AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_84fa4a86dd4f3411New Hampshire State AGfiled 2025-03-12Verified
- bd_ae26c3657413587fVermont State AGfiled 2025-03-12Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376536.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2025
- Raw hash
- fba136c20b30eff23e5e82c99eedd4e6730f95114ceab64362c18c4fdc44d38c
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Reynolds School Districtnorm: reynolds school district
- Domain
- reynolds.k12.or.us
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Mar 12, 2025
- Affected individuals
- 5
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIALHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Regulator citations
- Notified the Federal Bureau of InvestigationNotified Maryland Attorney General
- Third party
- via Carruth Compliance Consulting
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- MD AG >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.