AccidentalEducationEducationMisdeliveryCustomer Data InvolvedIdentity (basic)PIILowContained

Pennsylvania College of Technology

bd_19a50ac47eeca1c7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 23, 2023

Filed

Apr 17, 2023

To disclose

8 weeks

Affected

7state residents only

Linked

7 filings

Confidence

65%

Full breach record for Pennsylvania College of Technology →

Pennsylvania College of Technology inadvertently printed alumni personal information (including SSNs) on mailing labels of its alumni magazine editions from Spring 2022 and Spring 2023. The incident was discovered on February 23, 2023, affecting 7 New Hampshire residents. Notices were sent on April 12, 2023, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 298 days

discovery → filing · 8 weeks / 53 days

May 1, 2022

Begins

Feb 23, 2023

Discovered

Apr 17, 2023

Filed

vs. sector median

1 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_69a8640348bddb762023-04-12 · +5dVerified
Massachusetts State AGbd_7551d416fee940bb2023-04-12 · +5dVerified
Montana State AGbd_974da63acf10dd8e2023-04-12 · +5dCandidate
California State AGbd_b78f0914633adbf32023-04-12 · +5dVerified

Show 2 more filings ↓up to 5d gap

Maine State AGbd_e4e6147ee21682bf2023-04-12 · +5dVerified
Indiana State AGbd_e57fc531b7e4c1d62023-04-12 · +5dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Pennsylvania College of Technology
norm: pennsylvania college of
Industry: Educationllm

Discovered: Feb 23, 2023
Breach occurred: May 1, 2022 – Feb 23, 2023
Undetected for: 298 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 12, 2023
Affected individuals: 7state-resident count only
Data types: Identity (basic)PII
Attack vector: Unknown
Regulator citations: Notified Office of the New Hampshire Attorney General

During the incident: Penn College moved quickly to investigate and respond to the incident
Evaluate data handling procedures and policies
Identify potentially affected individuals
Providing access to credit monitoring services for one (1) year through TransUnion
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Reviewed our data handling procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Vermont State AGApr 12 · first

Massachusetts State AGApr 12 · first

Montana State AGApr 12 · first

California State AGApr 12 · first

Maine State AGApr 12 · first

Indiana State AGApr 12 · first

New Hampshire State AG+5d · this page

Pattern: first filing Apr 12 (VT), last Apr 17 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pennsylvania-college-technology-20230417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 17, 2023
Raw hash: f4a16d6bfe2a5d415c586f1487b82b7914d5d4466349cf6a9993d5202012aba7

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityPennsylvania College of Technology

Incidentdiscovered Feb 23, 2023

Stated responsePenn College moved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov