Almeida Law Group is investigating a data breach at Bozeman School District #7. The breach occurred on February 19, 2026 and was discovered on May 1, 2026. If you were affected, contact Almeida Law Group.
About Bozeman School District #7
Bozeman School District #7, also known as Bozeman Public Schools or BSD7, is a public K-12 school district based at 404 West Main Street in Bozeman, Montana. The district serves the city of Bozeman and the surrounding Gallatin Valley area, operating eight elementary schools, two middle schools, a senior high school, and an alternative high school program, with an enrollment of approximately 6,940 students across 14 schools. The 2026 breach affected current and former staff members, not students, and involved names and Social Security numbers—information that can be used to commit identity theft and financial fraud.
What Happened?
Bozeman School District #7 was listed in a filing with the Maine Attorney General. The incident was a phishing attack: around March 26, 2026, an unauthorized external party gained access to the district’s network through a social-engineered phishing campaign. The investigation determined that certain data on the network was subject to unauthorized access between February 19, 2026 and March 27, 2026. The district completed its initial forensic review on May 1, 2026, and sent written notifications to affected individuals on June 2, 2026. A total of 2,617 individuals were affected. The compromised data included first and last names in combination with Social Security numbers. The district confirmed that no student data was accessed. Superintendent Casey Bertram issued a public statement regarding the incident. The district is offering 12 months of Experian IdentityWorks credit monitoring and identity theft restoration assistance at no cost to affected individuals.
This is the second data security incident to affect Bozeman School District within roughly 18 months. In December 2024, the district was impacted by the nationwide PowerSchool breach, in which an unauthorized party accessed student and teacher data through a compromised credential in PowerSchool’s support portal. That earlier incident involved student contact details, mailing addresses, enrollment status, lunch status, and teacher employment information. The current 2026 phishing incident is a separate and distinct event. No ransomware group or named threat actor has been publicly attributed to the 2026 breach, and no class action litigation connected to it has been filed as of June 4, 2026.
Key Facts at a Glance
- Company or Organization: Bozeman School District #7
- Industry: Education (Public K-12 School District)
- Location: 404 West Main Street, Bozeman, MT 59715
- Incident type: Phishing / unauthorized network access
- Date of breach: February 19, 2026
- Date breach discovered: May 1, 2026
- Date of consumer notification: June 2, 2026
- Total persons affected: 2,617
- Identity theft protection offered: Yes — 12 months of Experian IdentityWorks (credit and identity monitoring, theft restoration assistance)
- Prior breach: Yes — December 2024 PowerSchool breach (student and teacher data via third-party vendor; separate incident)
- Litigation status: No class action or public litigation found as of June 4, 2026
- Source: Maine AG Filing; Montana Right Now; MSU Exponent; KBZK
What Should You Do?
If you received a notification letter from Bozeman School District #7, you should enroll in the complimentary 12-month Experian IdentityWorks credit monitoring service as soon as possible using the enrollment instructions included in your letter. You should also consider placing a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to make it harder for anyone to open new accounts in your name. Review your credit reports for accounts you did not open or inquiries you did not authorize; you are entitled to a free report from each bureau annually at AnnualCreditReport.com or by calling 1-877-322-8228. Monitor your financial accounts and statements regularly for any suspicious activity. If you suspect your information has been misused, report it at IdentityTheft.gov, which provides a personalized recovery plan.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
