Kalamazoo Public School District
bd_f567ff1c3033890f · schema v1 · pii pii-v1
Full breach record for Kalamazoo Public School District →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Interlock on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Kalamazoo Public Schools oversees 25 public schools in the district . Provides educational services for students ranging from preschool to high school. The district offers diverse programs including adult education, special education, and various extracurricular activities to support student growth. It aims to serve the local community by fostering academic excellence and personal development among students. Additionally, it collaborates with various community organizations to enhance educational outcomes and support for families.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Apr 26, 2025
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Indiana State AGbd_180cbfe964e43c952025-07-08 · +73dVerified
- Nebraska State AGbd_4b1ca388bd35c3502025-07-08 · +73dVerified
- Maine State AGbd_99ca09d419e04b372025-07-08 · +73dVerified by operator
- Massachusetts State AGbd_caa9e0fafef090d02025-07-08 · +73dVerified by operator
Show 1 more filing ↓Show fewer ↑up to 79d gap
- New Hampshire State AGbd_f5709505866f188c2025-07-14 · +79dVerified
Press reports (1)
- Pressinterlockbd_d7c0b14eff07b85e2025-04-30 · +4dCandidate
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Jul 8 (IN), last Jul 14 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
interlock
According to ransomware.live, Interlock is a ransomware group first observed in September 2024 that targets critical infrastructure sectors including healthcare, government, education, and technology across North America and Europe using double-extortion, with 57+ claimed victims including a major US dialysis provider exposing over two million patient records.