HackingEducationEducationEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentPHIMediumContained

Floyd County Public Schools

bd_ffaed90b3d68c4b6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 23, 2024

Filed

Oct 18, 2024

To disclose

8 weeks

Affected

Not disclosed

Confidence

67%

Full breach record for Floyd County Public Schools →

Floyd County Public Schools experienced a cybersecurity incident discovered on August 23, 2024, following a tip from law enforcement. The incident potentially exposed employee and dependent personal information, including names, addresses, dates of birth, Social Security numbers, driver's license numbers, bank account information, and health insurance details. The school system engaged cybersecurity experts, secured its systems, and is cooperating with the Virginia State Police and CISA. Free identity monitoring is being provided to affected employees and dependents.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing

Incident timeline

discovery → filing · 8 weeks / 56 days

Aug 23, 2024

Discovered

Oct 18, 2024

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Floyd County Public Schools
norm: floyd county public schools
Domain: floyd.k12.va.us
Industry: Education

Name: Floyd County Public Schools
norm: floyd county public schools
Domain: floyd.k12.va.us
Industry: Education
Industry: Educationllm

Discovered: Aug 23, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)EmploymentPHI
Data elements: Social Security numberDate of birth
Attack vector: Unknown
Threat actor: External
Regulator citations: Cooperating with law enforcement from the Virginia State Police’s Virginia Fusion CenterCooperating with the Cybersecurity and Infrastructure Security Agency of Homeland Security

During the incident: Engaged outside cybersecurity experts to mitigate disruption and assist in forensic investigation
Closed schools on August 23, 2024, to analyze security of technology environment
Secured systems and resumed school operations on Monday, August 26, 2024
Contacted and is cooperating with law enforcement from the Virginia State Police’s Virginia Fusion Center and the Cybersecurity and Infrastructure Security Agency of Homeland Security
Provided free identity monitoring services through Kroll for 12 months
Changes made: Provided free identity monitoring services through Kroll for 12 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-10-18-floyd-county-public-schools-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 18, 2024
Raw hash: afde7c94ce370d02b1e760298be16927acf4f008b9ee020423022cb86283483a

Reporting entityFloyd County Public Schools

Victim entityFloyd County Public Schools

Incidentdiscovered Aug 23, 2024

Stated responseEngaged outside cybersecurity experts to mitigate disruption and assist in forensic investigation

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov