HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Preston School District No. 201
bd_dcb3db7cebf26142 · schema v1 · pii pii-v1
Full breach record for Preston School District No. 201 →Preston School District No. 201 (Idaho) notified the Idaho Attorney General on January 13, 2025, of a cybersecurity incident involving third-party vendor PowerSchool. The breach exposed contact information (names, addresses) and potentially Social Security Numbers of some students, parents, and staff. The incident was contained by PowerSchool, with no evidence of malware. Identity protection services are being offered.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-13-2025-Preston-School-District-No.-201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2025
- Raw hash
- ab388d5ffeb0e76a3e243739a61b41ad2ad90ddbb3f6246a0989873d3cc2f989
Reporting entity
- Name
- Preston School District No. 201norm: preston school district no 201
- Domain
- psd201.org
Victim entity
- Name
- Preston School District No. 201norm: preston school district no 201
- Domain
- psd201.org
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 13, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the Attorney General’s Office of the security breach per Idaho Code §28-51-105(1)Notified the Executive Director of the State Board of Education and the State Superintendent of Public Instruction
- Third party
- via PowerSchool
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.