Cyber Incident Victim: Greater Lawerence Technical School District
Date:
Nov 2024
Location:
United States of America
Summary
Greater Lawerence Technical School District experienced an external hacking incident compromising personal identifiers and names of 2,667 individuals, including four Maine residents. The breach led to written notifications to affected parties and the provision of 24-month identity theft protection services through Experian, following discovery and investigation by the educational institution.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 4, 2024, Greater Lawrence Technical School District experienced an external system breach involving unauthorized hacking activity. The breach remained undetected until December 10, 2024—more than five weeks after the initial compromise—when district personnel discovered the intrusion. The incident exposed personal information belonging to 2,667 individuals, including four residents of Maine. Compromised data included names combined with other personal identifiers, though the specific types of additional identifiers were not detailed in the breach notification. Superintendent John Lavoie, whose contact information was listed in the filing with the Maine Attorney General's office, served as the designated representative for the district throughout the disclosure process. The technical school district, located at 57 River Road in Andover, Massachusetts, operates as an educational institution serving vocational and technical students. No information was provided regarding the specific systems targeted, the duration of attacker access, or the methods used to identify the breach beyond its classification as an external system compromise.
The district initiated written notifications to affected individuals on March 5, 2025, approximately four months after discovering the breach and nearly five months after the intrusion occurred. This notification timeline followed a previous breach disclosure made by the district on January 17, 2025, though no details were provided about the nature or scope of that prior incident. Greater Lawrence Technical School District offered affected individuals 24 months of identity theft protection services through Experian, though the specific features of these services were referenced only in an unspecified exhibit document. The Maine Attorney General's office received a supplemental notice document detailing the breach, titled "Greater_Lawerence_Technical_School_District_-_Supplemental_Notice_of_Data_Event_-_ME.pdf," as part of regulatory compliance requirements. No information was disclosed regarding containment measures taken after discovery, forensic investigation results, or whether law enforcement agencies were involved in responding to the incident.