Edmonds School District No. 15

On January 16, 2023, Edmonds School District No. 15 experienced a cyberattack that resulted in a significant data breach, exposing sensitive personal information of approximately 143,536 individuals. The compromised data included names, Social Security Numbers (SSNs), and financial details, putting affected individuals at high risk of identity theft, financial fraud, and other malicious activities. The breach was publicly disclosed by the Washington State Office of the Attorney General on October 6, 2023, indicating a delayed response in notification. Given the nature of the exposed data particularly SSNs and financial records the incident poses severe long-term consequences for victims, including potential credit damage, unauthorized transactions, and prolonged vulnerability to cybercrime. The scale of the breach, combined with the sensitivity of the leaked information, underscores a critical failure in the district’s cybersecurity defenses, raising concerns about data protection protocols in educational institutions handling vast amounts of personally identifiable information (PII).

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=14660

TPRM report: https://www.rankiteo.com/company/edmonds-school-district

"id": "edm202090725",
"linkid": "edmonds-school-district",
"type": "Cyber Attack",
"date": "1/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 143536,
                        'industry': 'education',
                        'location': 'Washington, USA',
                        'name': 'Edmonds School District No. 15',
                        'type': 'educational institution'}],
 'data_breach': {'number_of_records_exposed': 143536,
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personally identifiable '
                                              'information (PII)',
                                              'financial information']},
 'date_detected': '2023-01-16',
 'date_publicly_disclosed': '2023-10-06',
 'description': 'On October 6, 2023, the Washington State Office of the '
                'Attorney General reported a data breach incident at Edmonds '
                'School District No. 15, which occurred on January 16, 2023. '
                'The breach, categorized as a cyberattack (other), affected '
                'approximately 143,536 individuals and involved exposure of '
                'various personal information types, including names, Social '
                'Security Numbers, and financial information.',
 'impact': {'data_compromised': ['names',
                                 'Social Security Numbers',
                                 'financial information'],
            'identity_theft_risk': 'high',
            'payment_information_risk': 'high'},
 'references': [{'date_accessed': '2023-10-06',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Washington State '
                                                        'Office of the '
                                                        'Attorney General']},
 'title': 'Edmonds School District No. 15 Data Breach',
 'type': 'cyberattack (other)'}