HackingEducationEducationCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentEducationMinorMediumContained

Baltimore City Public Schools

bd_e3c3ec5edab65991 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2025

Filed

Apr 28, 2025

To disclose

11 weeks

Affected

1state residents only

Linked

7 filings

Confidence

67%

Full breach record for Baltimore City Public Schools →

Baltimore City Public Schools notified the Idaho Attorney General of a cybersecurity incident discovered on February 13, 2025, affecting one Idaho resident. The breach exposed PII including SSNs, driver's licenses, and passports for staff, and student records. The school engaged forensic investigators, notified law enforcement, installed EDR software, reset passwords, and offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 74 days

Feb 13, 2025

Discovered

Apr 28, 2025

Filed

vs. sector median

on median

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_9ab6c0fe1104bebb2025-04-29 · +1dVerified
Massachusetts State AGbd_b126e5260febdbd02025-04-29 · +1dVerified
Maine State AGbd_bb5f9b0432bd4ec52025-04-29 · +1dCandidate
New Hampshire State AGbd_da05d89cd8b7eef72025-04-29 · +1dVerified

Show 2 more filings ↓up to 4d gap

Indiana State AGbd_1aa674a0a361f7e32025-04-24 · +4dVerified
Nebraska State AGbd_313c761c5298f2b22025-04-24 · +4dVerified

Name: Baltimore City Public Schools
norm: baltimore city public schools

Name: Baltimore City Public Schools
norm: baltimore city public schools
Industry: Educationllm

Discovered: Feb 13, 2025
Materiality determined: —
Notification sent: Apr 24, 2025
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)EmploymentEducation
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Provided courtesy notice to Idaho Attorney General

During the incident: Engaged an expert cybersecurity forensic investigation team
Notified law enforcement
Installed additional endpoint detection and response software
Reset all passwords
Changes made: Reviewing its data security policies and procedures and making improvements
Offering complimentary access to two years of credit monitoring, identity monitoring, fraud consultation, identity theft restoration services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 24 · first

Nebraska State AGApr 24 · first

Idaho State AG+4d · this page

Vermont State AG+5d

Massachusetts State AG+5d

Maine State AG+5d

New Hampshire State AG+5d

Pattern: first filing Apr 24 (IN), last Apr 29 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2025/04/City-Schools-ID-AG-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 28, 2025
Raw hash: 75fa29a8b491b3f4c19bd34612aa06f35d112cec1cc418aa70a356c3c9d37797

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBaltimore City Public Schools

Victim entityBaltimore City Public Schools

Incidentdiscovered Feb 13, 2025

Stated responseEngaged an expert cybersecurity forensic investigation team

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov