HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALSMediumContained
Floyd County Public Schools
bd_ffaed90b3d68c4b6 · schema v1 · pii pii-v1
Full breach record for Floyd County Public Schools →Floyd County Public Schools (FCPS) notified employees of a cybersecurity incident discovered on August 23, 2024, following a law enforcement tip. The breach exposed employee PII including SSNs, driver's licenses, bank account info, and health data. FCPS engaged forensic experts, cooperated with Virginia State Police and CISA, and provided 12 months of identity monitoring via Kroll.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-18-floyd-county-public-schools-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- afde7c94ce370d02b1e760298be16927acf4f008b9ee020423022cb86283483a
Reporting entity
- Name
- Floyd County Public Schoolsnorm: floyd county public schools
- Domain
- floyd.k12.va.us
Victim entity
- Name
- Floyd County Public Schoolsnorm: floyd county public schools
- Domain
- floyd.k12.va.us
Incident
- Discovered
- Aug 23, 2024
- Materiality determined
- —
- Notification sent
- Oct 18, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Cooperating with law enforcement from the Virginia State Police’s Virginia Fusion CenterCooperating with the Cybersecurity and Infrastructure Security Agency of Homeland Security
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.