HackingDelayed DiscoveryPIILowContained
New Hampshire PublicRadio
bd_1a7ccb3fa3dd85cb · schema v1 · pii pii-v1
Full breach record for New Hampshire PublicRadio →New Hampshire Public Radio (NHPR) disclosed a cybersecurity incident where an unknown actor accessed its network between April 6, 2024, and May 6, 2024. NHPR engaged forensic specialists and a data review vendor. The incident involved unauthorized access to systems containing personal information. NHPR reported the incident to federal law enforcement and regulators, implemented additional security measures, and offered 12 months of credit monitoring via Experian.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 80 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_73e2b0c7ff515325Leak Siteakirafiled 2024-05-31(80d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_edc27cf8d6c6397eMaine State AGfiled 2024-08-20Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-20-new-hampshire-public-radio-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2024
- Raw hash
- b41cb6044daaf35e3fd09429d70e388d19ca8a6781cb2fb6ca1f6608d06c4d80
Reporting entity
- Name
- New Hampshire PublicRadionorm: new hampshire publicradio
- Domain
- nhpr.org
Victim entity
- Name
- New Hampshire PublicRadionorm: new hampshire publicradio
- Domain
- nhpr.org
Incident
- Discovered
- May 6, 2024
- Materiality determined
- —
- Notification sent
- Aug 20, 2024
- Affected individuals
- Not disclosed
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported this incident to federal law enforcement and applicable regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.