HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Butte County School District No. 111
bd_fb0c930274360cfe · schema v1 · pii pii-v1
Full breach record for Butte County School District No. 111 →Butte County School District 111 (Idaho) notified families and staff on Jan 10, 2025, of a Dec 22, 2024, cybersecurity incident involving third-party vendor PowerSchool. An unauthorized actor used compromised credentials to access student and teacher data (names, addresses, emails, some SSNs). The District disabled remote support, reset passwords, blocked IPs, and reported the incident to state education authorities.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-10-2025-Butte-County-School-District-No.-111.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2025
- Raw hash
- af335cd446647cd0efb5a52553da01f60af953e9352ea8da022b68ad29bb6e25
Reporting entity
- Name
- Butte County School District No. 111norm: butte county school district no 111
Victim entity
- Name
- Butte County School District No. 111norm: butte county school district no 111
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to the Idaho Counties Risk Management Pool, State Board of Education, and Idaho Department of Education
- Third party
- via PowerSchool
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.