HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPIIMediumContained
Banks School District #13
bd_fe949f014f99a32d · schema v1 · pii pii-v1
Full breach record for Banks School District #13 →Banks School District notified of a data breach involving third-party administrator Carruth Compliance Consulting. Incident occurred Dec 21, 2024. Affected data includes names, SSNs, financial account info, driver's licenses, W-2s, and medical billing info. FBI notified. Credit monitoring offered.
Vermont clock⏱ VT AG >14 bday10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ebb68ab403c9a6f5Maryland State AGfiled 2025-02-28Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-28-banks-school-district-13-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- 630a5115ed967a1adc74321be5bf2d69134ecfa39ed5cdc1bd07bfde16ef158d
Reporting entity
- Name
- Banks School District #13norm: banks school district 13
- Domain
- banks.k12.or.us
Victim entity
- Name
- Banks School District #13norm: banks school district 13
- Domain
- banks.k12.or.us
Incident
- Discovered
- Dec 21, 2024
- Materiality determined
- Feb 28, 2025
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.