HackingEducationEducationSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedData ExfiltratedPIICREDENTIALSFINANCIALPHIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
North Wasco County School District
bd_f8865e92ce8922e6 · schema v1 · pii pii-v1
Full breach record for North Wasco County School District →North Wasco County School District was notified on Jan 13, 2025 by third-party retirement plan administrator Carruth Compliance Consulting of unauthorized access on Dec 21, 2024. ~2,100 individuals affected (1 Maine resident). Data potentially exposed: SSNs, driver's license, financial accounts, W-2, medical billing info. FBI notified. IDX identity protection offered for 12 months.
Maine clockDiscovered Jan 13, 2025 → Filed with AG Mar 2, 202548d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3fe9e0965f999055Oregon State AGfiled 2025-03-02Verified
- bd_0a37cd427731d3e1Montana State AGfiled 2025-02-28(2d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/97f77e0b-18a9-4724-88af-4cbdd9da6b37.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 2, 2025
- Raw hash
- cf5f4dcea9c037c54d13a40b58e375404481aa73921a1111dfb210ee1b9337fb
Reporting entity
- Name
- North Wasco County School Districtnorm: north wasco county school district
- Domain
- nwasco.k12.or.us
- Industry
- Education
Victim entity
- Name
- North Wasco County School Districtnorm: north wasco county school district
- Domain
- nwasco.k12.or.us
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Feb 28, 2025
- Affected individuals
- 1
- Data types
- PIICREDENTIALSFINANCIALPHIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Third-Party / Supply Chain
- Threat actor
- External
- Regulator citations
- Federal Bureau of Investigation notified by Carruth Compliance Consulting
- Third party
- via Carruth Compliance Consulting
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 13, 2025→ Filed with AG: Mar 2, 202548d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.