Eldon School District

Summary

An unauthorized actor accessed the Edmonds School District's network, compromising personal information including names and Social Security Numbers during a multi-week intrusion. The breach impacted over 91,000 individuals, with delayed discovery prompting subsequent investigations and notifications. The district provided affected parties with 12 months of credit monitoring and identity protection services through a third-party provider. Technical disruptions from the incident caused extended internet outages across the school system's operations.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

The Edmonds School District experienced a significant network breach between January 16 and January 31, 2023, when an unauthorized actor infiltrated its systems. This intrusion caused widespread technical disruptions, leaving district schools without internet access for nearly two weeks. Initial public communications referred to the incident as a "data event" impacting operational continuity. A subsequent third-party forensic investigation confirmed that the attacker had accessed and viewed personal information stored on the network during this two-week period. The district's IT infrastructure remained compromised throughout the duration of the unauthorized access, though specific compromised systems or attack vectors were not publicly detailed. Technical restoration efforts coincided with the forensic examination, though the exact timeline for full network recovery wasn't specified in disclosures.

The breach was formally discovered on September 5, 2023, over seven months after the initial intrusion, according to the district's filing with the Maine Attorney General. Investigators determined the incident constituted an external system breach involving hacking that exposed names combined with Social Security Numbers. Edmonds School District notified 91,325 affected individuals nationwide, including seven Maine residents, through written notices dispatched on May 15 and October 6, 2023. This notification followed a prior breach disclosure made by the district on May 15, 2023, though details of that earlier event weren't specified. Impacted individuals received 12 months of credit monitoring and identity protection services through IDX. A subsequent May 2023 filing with Maine authorities revised the affected individual count to 833, without explaining the discrepancy from the original 91,325 figure reported in the same year. The district's Director of IT, Chris Bailey, served as the designated contact for breach-related communications.

Sources

Sources available to members: 2 sources.