HackingEducationEducationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

El Dorado Union High School District

bd_f31137cf90d2d146 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 18, 2024

Filed

Nov 14, 2024

To disclose

21 weeks

Affected · nationwide

31,8962 in this filing

Linked

7 filings

Confidence

64%

Full breach record for El Dorado Union High School District →

El Dorado Union High School District experienced an external system breach (hacking) between May 25 and June 18, 2024. The District discovered suspicious activity on June 18, 2024. Unauthorized access allowed an actor to acquire names and Social Security numbers. 31,896 individuals were affected, including 2 Maine residents. The District notified federal law enforcement, engaged third-party specialists, and provided 12 months of credit monitoring through Equifax.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 18, 2024 → Filed with AG Nov 14, 2024149d ✗ ME AG >90d21 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 24 days

discovery → filing · 21 weeks / 149 days

May 25, 2024

Begins

Jun 18, 2024

Discovered

Nov 14, 2024

Filed

vs. sector median

+13 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_0d1c0e7efd7dc17e2024-11-14Candidate
Vermont State AGbd_255eae217483d65f2024-11-14Verified
New Hampshire State AGbd_583471004e661c5a2024-11-14Verified
Indiana State AGbd_5dfbd0c4db6c25372024-11-14Verified

Show 2 more filings ↓up to 1d gap

California State AGbd_880a8376cfbf2cda2024-11-14Verified
Massachusetts State AGbd_1be7418fb52122e72024-11-15 · +1dVerified

Name: El Dorado Union High School District
norm: el dorado union high school district
Domain: eduhsd.k12.ca.us

Name: El Dorado Union High School District
norm: el dorado union high school district
Domain: eduhsd.k12.ca.us
Industry: Educationllm

Discovered: Jun 18, 2024
Breach occurred: May 25, 2024 – Jun 18, 2024
Undetected for: 24 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 14, 2024
Affected individuals: 31,896state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Providing written notice of this incident to relevant state regulators and to the three major consumer credit reporting agencies: Equifax, Experian, and TransUnion
Initial access: exploit_public_facing

During the incident: Launched an investigation with the assistance of third-party specialists
Undertook a comprehensive review of the data at risk
Notified federal law enforcement of the event
Implemented additional safeguards related to data security
Provided individuals whose personal information was potentially affected by this incident with access to credit monitoring services for twelve (12) months through Equifax at no cost to the individuals
Providing written notice of this incident to relevant state regulators and to the three major consumer credit reporting agencies: Equifax, Experian, and TransUnion
Changes made: Reviewing our policies, and procedures related to data privacy and security to reduce the likelihood of a similar future incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(149 days from discovery to filing)
Compliance flags: ME AG >90d · 149dME resident >60d · 149d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 18, 2024
→ Filed with AG: Nov 14, 2024
149d 90 days ME AG >90d
Maine
Discovered: Jun 18, 2024
→ Notified: Nov 14, 2024
149d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 18, 2024 → Filed with AG: Nov 14, 2024	149d	90 days	ME AG >90d
Maine	Discovered: Jun 18, 2024 → Notified: Nov 14, 2024	149d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGNov 14 · first

Vermont State AGNov 14 · first

New Hampshire State AGNov 14 · first

Indiana State AGNov 14 · first

California State AGNov 14 · first

Maine State AGNov 14 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2b45bb9b-9ffc-4f35-90bb-9767645f89c7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 14, 2024
Raw hash: 7b74c52e27e3918bf78a202489df000be5f90d511ba869189fba6c70214de1a2

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityEl Dorado Union High School District

Victim entityEl Dorado Union High School District

Incidentdiscovered Jun 18, 2024

Stated responseLaunched an investigation with the assistance of third-party specialists

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov