HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTEDUCATIONMediumContained
Baltimore City Public Schools
bd_e3c3ec5edab65991 · schema v1 · pii pii-v1
Full breach record for Baltimore City Public Schools →Baltimore City Public Schools notified the Idaho Attorney General of a cybersecurity incident discovered on February 13, 2025, affecting one Idaho resident. The breach exposed PII including SSNs, driver's licenses, and passports for staff, and student records. The school engaged forensic investigators, notified law enforcement, installed EDR software, reset passwords, and offered two years of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_9ab6c0fe1104bebbVermont State AGfiled 2025-04-29(1d gap)Verified
- bd_bb5f9b0432bd4ec5Maine State AGfiled 2025-04-29(1d gap)Candidate
- bd_da05d89cd8b7eef7New Hampshire State AGfiled 2025-04-29(1d gap)Verified
- bd_1aa674a0a361f7e3Indiana State AGfiled 2025-04-24(4d gap)Verified
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/04/City-Schools-ID-AG-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 28, 2025
- Raw hash
- 75fa29a8b491b3f4c19bd34612aa06f35d112cec1cc418aa70a356c3c9d37797
Reporting entity
- Name
- Baltimore City Public Schoolsnorm: baltimore city public schools
Victim entity
- Name
- Baltimore City Public Schoolsnorm: baltimore city public schools
Incident
- Discovered
- Feb 13, 2025
- Materiality determined
- —
- Notification sent
- Apr 24, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTEDUCATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided courtesy notice to Idaho Attorney General
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.