AccidentalEducationEducationMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

THE JOHNS HOPKINS UNIVERSITY

bd_0f191e1fbaa3f812 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 19, 2014

Filed

Apr 22, 2014

To disclose

5 weeks

Affected

4state residents only

Linked

2 filings

Confidence

67%

Full breach record for THE JOHNS HOPKINS UNIVERSITY →3 incidents on file

Johns Hopkins University notified New Hampshire AG of a data security breach discovered on March 19, 2014. Files containing names and SSNs were inadvertently made accessible on the Internet. 4 NH residents were affected. Notifications mailed April 23, 2014. ID Experts provided 1-year identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 34 days

Mar 19, 2014

Discovered

Apr 22, 2014

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_5e7ee5c8e9a0bd992014-04-29 · +7dVerified

Name: ID Experts
norm: id experts
Domain: jhu.edu

Name: THE JOHNS HOPKINS UNIVERSITY
norm: the johns hopkins university
Domain: jhu.edu
Industry: Educationllm

Discovered: Mar 19, 2014
Materiality determined: —
Notification sent: Apr 23, 2014
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection

During the incident: Secured robust protection for those who were affected
Provided a one-year membership in identity theft protection and restoration program
Removed the files from the Internet as soon as the problem was discovered
Changes made: Removed the files from the Internet
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 22 · first · this page

Massachusetts State AG+7d

Pattern: first filing Apr 22 (NH), last Apr 29 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/johns-hopkins-university-20140422.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2014
Raw hash: ee22c2be7acf8f3160c2861fc2f65e5d3a58068c2971e5e89149da7733d70d4a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityID Experts

Victim entityTHE JOHNS HOPKINS UNIVERSITY

Incidentdiscovered Mar 19, 2014

Stated responseSecured robust protection for those who were affected

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov