MisuseEducationEducationPrivilege AbuseEmployee Data InvolvedTargetedFinancial accountIdentity (basic)LowContained

Manhattan School of Music

bd_02c9e8a93c2fdbd8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 7, 2019

Filed

Apr 16, 2019

To disclose

6 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Manhattan School of Music →2 incidents on file

Manhattan School of Music notified the NH AG that a former employee forwarded emails containing donor financial info (checks, account/routing numbers) to a personal account. Discovered March 7, 2019. One NH resident affected. Notice sent April 12, 2019. Kroll credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Mar 7, 2019

Discovered

Apr 16, 2019

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_550efb0b61f54f192019-04-12 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Manhattan School of Music
norm: manhattan school of music
Industry: Educationllm

Discovered: Mar 7, 2019
Materiality determined: —
Notification sent: Apr 12, 2019
Affected individuals: 1state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: Internal
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: insider_action

During the incident: Launched an investigation to determine the content of the forwarded emails
Contacted the former employee
Provided written notice to the individuals with information within the emails
Arranged to have Kroll Cyber Security protect your identity for one year at no cost
Changes made: Provided impacted individuals with access to 1 year of free credit monitoring and identity theft protection services through Kroll
Provided guidance on how to better protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 12 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/manhattan-school-music-20190416.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2019
Raw hash: bca5eef0ab0c31742868ada9b91ee2b5a81e6ef9afc537952c4481015c9cf874

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityManhattan School of Music

Incidentdiscovered Mar 7, 2019

Stated responseLaunched an investigation to determine the content of the forwarded emails

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov