HackingEducationEducationStolen CredentialsCustomer Data InvolvedEducationLowContained

Rockland BOCES

bd_fdc73f1ff7800b98 · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 12, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

1state residents only

Confidence

67%

Full breach record for Rockland BOCES →2 incidents on file

Rockland BOCES discovered unauthorized access to an employee email account on August 12, 2026. The incident may have exposed personal information, including test data, of affected individuals. The organization secured the account, engaged legal counsel, and implemented additional safeguards and security training. Credit monitoring services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 12, 2026

Discovered

Sep 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Rockland BOCES
norm: rockland boces

Name: Rockland BOCES
norm: rockland boces
Industry: Educationllm

Discovered: Aug 12, 2026
Materiality determined: —
Notification sent: Sep 21, 2026
Affected individuals: 1state-resident count only
Data types: Education
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Initiated our incident response procedures
Engaged legal counsel
Secured the affected account
Began an investigation
Provided supplemental security awareness training to personnel
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Implemented additional safeguards
Provided supplemental security awareness training to personnel
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1652-rockland-boces/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: 1d44a7babfc5ad2637296790a8f88fe6af957119983d778dad1be80f0ea982f8

Reporting entityRockland BOCES

Victim entityRockland BOCES

Incidentdiscovered Aug 12, 2026

Stated responseInitiated our incident response procedures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov