HackingEducationEducationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Strong Foundations Charter School

bd_0c8cb7a6325863de · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 28, 2026

Filed

Oct 2, 2026

To disclose

9 weeks

Affected

2state residents only

Confidence

70%

Full breach record for Strong Foundations Charter School →

Strong Foundations Charter School notified the NH Attorney General of unauthorized access to a limited number of email accounts on July 28, 2026. The incident potentially impacted two New Hampshire residents, exposing full name, state identification number, and financial account information. The school contained the incident immediately, engaged external cybersecurity professionals, and notified affected individuals on September 29, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 66 days

Jul 28, 2026

Begins

Jul 28, 2026

Discovered

Oct 2, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Strong Foundations Charter School
norm: strong foundations charter school

Name: Strong Foundations Charter School
norm: strong foundations charter school
Industry: Educationllm

Discovered: Jul 28, 2026
Breach occurred: Jul 28, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 29, 2026
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Office of the Attorney General Consumer Protection Bureau

During the incident: Contained the incident immediately upon detection
Commenced a prompt and thorough investigation
Worked closely with external cybersecurity professionals
Conducted extensive manual document review
Notified potentially impacted individuals
Provided written notice to affected residents
Changes made: Continually evaluates and modifies practices to enhance security and privacy
Advised affected individuals to remain vigilant in reviewing financial account statements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/strong-foundations-charter-school-20261002.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 2, 2026
Raw hash: 247f017b57730a7e5a7c8c3831c1d4466fd028ea438fa8442d859c322890c5a1

Reporting entityStrong Foundations Charter School

Victim entityStrong Foundations Charter School

Incidentdiscovered Jul 28, 2026

Stated responseContained the incident immediately upon detection

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov