HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Association of Texas Professional Educators

bd_d9cc5d80e842009f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2024

Filed

Jun 14, 2024

To disclose

18 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Association of Texas Professional Educators →

Association of Texas Professional Educators (ATPE) notified the California Attorney General of a data breach discovered on February 12, 2024. An unauthorized user accessed ATPE systems, potentially compromising names, addresses, dates of birth, Social Security numbers, Tax Identification Numbers, medical records, and financial account information for members. ATPE disconnected network access, engaged forensic investigators, and is providing credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 12, 2024 → Notified Apr 12, 202460d ✓ CA 60-day OK18 weeks discovery → filing

Incident timeline

discovery → filing · 18 weeks / 123 days

Feb 12, 2024

Discovered

Jun 14, 2024

Filed

vs. sector median

on median

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_2cd1ae01182c4a8b2024-06-14Verified
Montana State AGbd_d901a8608b76705d2024-06-14Candidate
Maine State AGbd_df9f66081bac01c22024-06-14Candidate

Name: Association of Texas Professional Educators
norm: association of texas professional educators

Name: Association of Texas Professional Educators
norm: association of texas professional educators
Industry: Professional Servicesllm

Discovered: Feb 12, 2024
Materiality determined: —
Notification sent: Apr 12, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified affected individuals residing in Texas by substitute notice on April 12, 2024Media notice on April 15, 2024Filed notification with California Attorney General

During the incident: Disconnected all access to the network
Engaged a specialized third-party cybersecurity firm and IT personnel
Conducted a comprehensive forensic investigation
Changed administrative credentials
Installed enhanced security safeguards on ATPE environment and endpoints
Restored ATPE website in a Microsoft Azure hosted environment
Providing Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Installed enhanced security safeguards on ATPE environment and endpoints
Restored ATPE website in a Microsoft Azure hosted environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(123 days from discovery to filing)
Compliance flags: CA 60-day OK · 60d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 12, 2024
→ Notified: Apr 12, 2024
60d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 12, 2024 → Notified: Apr 12, 2024	60d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJun 14 · first

Montana State AGJun 14 · first

Maine State AGJun 14 · first

California State AGJun 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-586954
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2024
Raw hash: 5cf2a9db57c87154178859fb76344bcea4b81783ef4355c762bedfaccb3d8722

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAssociation of Texas Professional Educators

Victim entityAssociation of Texas Professional Educators

Incidentdiscovered Feb 12, 2024

Stated responseDisconnected all access to the network

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov