HackingEducationEducationCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
THE PEDDIE SCHOOL
bd_e586fa423412f639 · schema v1 · pii pii-v1
Full breach record for THE PEDDIE SCHOOL →The Peddie School, an educational institution in Hightstown, NJ, experienced an external system breach in which an unknown actor accessed its computer network between October 30 and December 22, 2023, copying files containing personal information (names and Social Security numbers/ITINs). The comprehensive data review was completed December 24, 2024. Five Maine residents were notified on March 25, 2025. Total affected: 5,783. Experian IdentityWorks (12-month) offered.
Maine clockDiscovered Dec 24, 2024 → Filed with AG Mar 25, 202591d ✗ ME AG >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 392 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_476bc789fe64eb5cLeak Sitecl0pfiled 2024-02-26(392d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_77e79094ddea2d02Maine State AGfiled 2024-07-05(263d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1756f259-9592-40dc-84a0-120b6b04b356.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- 998ca9f8cb1c854acc6d306cb26c86859d397395a54ea471aa001702b41d7891
Reporting entity
- Name
- THE PEDDIE SCHOOLnorm: the peddie school
- Domain
- peddie.org
- Industry
- Education
Victim entity
- Name
- THE PEDDIE SCHOOLnorm: the peddie school
- Domain
- peddie.org
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Dec 24, 2024
- Materiality determined
- —
- Notification sent
- Mar 25, 2025
- Affected individuals
- 5
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to Federal Bureau of Investigation
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- ME AG >90d · 91dLeak >180dME resident >60d · 91d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 24, 2024→ Filed with AG: Mar 25, 202591d 90 days ME AG >90d Maine Discovered: Dec 24, 2024→ Notified: Mar 25, 202591d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.