Minneapolis Public Schools
bd_f3c4fb86814cf474 · schema v1 · pii pii-v1
Full breach record for Minneapolis Public Schools →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Kept in the Dark: Inside the Minneapolis Schools Cyberattack - The 74. Minneapolis Public Schools: The Minneapolis school district was the victim of a cyberattack in February 2023, during which hackers stole sensitive information about students and teachers. District officials concealed the extent of the data breach from families and students, despite the online publication of files stolen by the Medusa ransomware group. It took seven months for the 105,617 affected individuals to be informed of the incident. Linked ransomware group: Medusa.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Feb 17, 2023
Press report
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitemedusabd_524a24e43eef86032023-02-17Verified by operator
Regulatory filings (6) · sorted by filing gap
- Montana State AGbd_0b239d4c54fc48822023-09-05 · +200dVerified by operator
- Indiana State AGbd_11a17eb8da1f746e2023-09-05 · +200dVerified
- Massachusetts State AGbd_371bdf2738cff1e12023-09-05 · +200dVerified by operator
- Vermont State AGbd_965f8261736818942023-09-05 · +200dVerified
Show 2 more filings ↓Show fewer ↑up to 200d gap
- Maine State AGbd_b96dbece1633723d2023-09-05 · +200dVerified by operator
- New Hampshire State AGbd_c3a500621ad44f582023-09-05 · +200dVerified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
medusa
According to ransomware.live, Medusa is a ransomware-as-a-service operation active since June 2021 that has targeted over 300 victims across critical infrastructure sectors including healthcare, education, legal, and manufacturing using double-extortion, with attacks surging 42% between 2023 and 2024 and a formal CISA advisory issued in early 2025.