HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTHEALTH_BASICMediumContained
Parkrose School District
bd_f9c07acf9a679a8e · schema v1 · pii pii-v1
Full breach record for Parkrose School District →Parkrose School District notified of a data breach affecting its third-party administrator, Carruth Compliance Consulting. The incident, occurring on December 21, 2024, involved unauthorized access to personal information including SSNs, financial account numbers, and driver's license numbers. Parkrose is offering credit monitoring services to affected employees and beneficiaries.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_15fae84bea21ca4bMontana State AGfiled 2025-02-28(5d gap)Candidate
- bd_1a6cc39b9b813c83Oregon State AGfiled 2025-02-28(5d gap)Verified
- bd_65c665f43dcfba16Indiana State AGfiled 2025-02-28(5d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-03-05-parkrose-school-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2025
- Raw hash
- 62817ed224f077b3f83589239fbc158a99138a47ffa64c83e43803fd791e4cbc
Reporting entity
- Name
- Parkrose School Districtnorm: parkrose school district
Victim entity
- Name
- Parkrose School Districtnorm: parkrose school district
Incident
- Discovered
- Dec 21, 2024
- Materiality determined
- Feb 28, 2025
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.