HackingEducationEducationCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentEducationMediumContained

Baltimore City Public Schools

bd_da05d89cd8b7eef7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2025

Filed

Apr 29, 2025

To disclose

11 weeks

Affected

4state residents only

Linked

7 filings

Confidence

67%

Full breach record for Baltimore City Public Schools →

Baltimore City Public Schools notified the NH AG of a cybersecurity incident discovered on Feb 13, 2025, affecting 4 NH residents (employees/contractors). Impacted data included SSNs, driver's licenses, and student records. The organization engaged forensic investigators, notified law enforcement, installed EDR software, and reset passwords. Notices were sent on April 24, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 75 days

Feb 13, 2025

Discovered

Apr 29, 2025

Filed

vs. sector median

+1 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_9ab6c0fe1104bebb2025-04-29Verified
Massachusetts State AGbd_b126e5260febdbd02025-04-29Verified
Maine State AGbd_bb5f9b0432bd4ec52025-04-29Candidate
Idaho State AGbd_e3c3ec5edab659912025-04-28 · +1dCandidate

Show 2 more filings ↓up to 5d gap

Indiana State AGbd_1aa674a0a361f7e32025-04-24 · +5dVerified
Nebraska State AGbd_313c761c5298f2b22025-04-24 · +5dVerified

Name: Baltimore City Public Schools
norm: baltimore city public schools

Name: Baltimore City Public Schools
norm: baltimore city public schools
Industry: Educationllm

Discovered: Feb 13, 2025
Materiality determined: —
Notification sent: Apr 24, 2025
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDEmploymentEducation
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementNotified New Hampshire Attorney General

During the incident: Engaged an expert cybersecurity forensic investigation team
Notified law enforcement
Conducted an initial investigation
Took steps to confirm the security of our systems
Installed additional endpoint detection and response software
Reset all passwords
Changes made: Installed additional endpoint detection and response software
Reset all passwords of users
Reviewing its data security policies and procedures and making improvements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(75 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 24 · first

Nebraska State AGApr 24 · first

Idaho State AG+4d

Vermont State AG+5d

Massachusetts State AG+5d

Maine State AG+5d

New Hampshire State AG+5d · this page

Pattern: first filing Apr 24 (IN), last Apr 29 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/baltimore-city-public-schools-20250429.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2025
Raw hash: e5571305066b98fada8ad2127eea9483a4ceba5ea32deb172546138e687167bb

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBaltimore City Public Schools

Victim entityBaltimore City Public Schools

Incidentdiscovered Feb 13, 2025

Stated responseEngaged an expert cybersecurity forensic investigation team

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov