HackingEducationEducationStolen CredentialsTargetedIdentity (basic)Government IDMediumContained

Wilkes University

bd_1e62ba2bdea401e2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 22, 2025

Filed

Oct 14, 2025

To disclose

22 days

Affected

32state residents only

Linked

9 filings

Confidence

66%

Full breach record for Wilkes University →

Wilkes University notified the New Hampshire Attorney General that an unauthorized actor accessed its network between January 25-26, 2025. The breach was discovered on September 22, 2025, affecting 32 NH residents. Personal information, including names and Social Security numbers, was compromised. Wilkes engaged forensic investigators, contained the threat, and is offering one year of complimentary credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 240 days

discovery → filing · 22 days

Jan 25, 2025

Begins

Sep 22, 2025

Discovered

Oct 14, 2025

Filed

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_03e4afc59422413b2025-10-09 · +5dVerified
Texas State AGbd_4abfa14e2a8b236a2025-10-09 · +5dVerified
Indiana State AGbd_2db65b528a708d272025-10-08 · +6dVerified
Maine State AGbd_5791e3c640c79bfb2025-10-08 · +6dCandidate

Show 4 more filings ↓up to 6d gap

Montana State AGbd_851c220f392a77022025-10-08 · +6dVerified by operator
Nebraska State AGbd_8c385c92f9ce205d2025-10-08 · +6dVerified
Maine State AGbd_aa2c70d389b3dc002025-10-08 · +6dCandidate
Vermont State AGbd_f085113c5eeda8892025-10-08 · +6dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Wilkes University
norm: wilkes university
Domain: wilkes.edu
Industry: Educationllm

Discovered: Sep 22, 2025
Breach occurred: Jan 25, 2025 – Jan 26, 2025
Undetected for: 240 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 8, 2025
Affected individuals: 32state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Worked to contain the threat and secure its internal environment
Commenced a prompt and thorough investigation
Worked very closely with external cybersecurity professionals
Conducted an extensive forensic investigation and manual document review
Providing the potentially affected residents with notification
Offering the potentially affected residents whose Social Security number was potentially impacted by the incident with complimentary credit monitoring services
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Indiana State AGOct 8 · first

Maine State AGOct 8 · first

Montana State AGOct 8 · first

Nebraska State AGOct 8 · first

Maine State AGOct 8 · first

Vermont State AGOct 8 · first

Massachusetts State AG+1d

Texas State AG+1d

New Hampshire State AG+6d · this page

Pattern: first filing Oct 8 (IN), last Oct 14 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wilkes-university-20251014.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2025
Raw hash: 00e83773f296be08b9580adc83130a255c017896d53e5c951c7eb9c816dc01c8

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityWilkes University

Incidentdiscovered Sep 22, 2025

Stated responseWorked to contain the threat and secure its internal environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov