DisclosureLens
HackingEducationEducationCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)EducationHighContained

Suffolk University

bd_21109bcb644009ac · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 9, 2022

Filed

Dec 5, 2022

To disclose

21 weeks

Affected

1,878state residents only

Linked

6 filings

Confidence

66%
Full breach record for Suffolk University4 incidents on file

Suffolk University notified the NH Attorney General of unauthorized access to its network occurring on or about July 9, 2022. The incident affected approximately 1,878 New Hampshire residents. Impacted data included names, Social Security numbers, driver's license/state ID/passport numbers, financial account information, and student health clinic records. The university contained the threat, engaged external cybersecurity professionals, and offered one year of complimentary credit monitoring via Experian IdentityWorks.

Incident timeline

discovery → filing · 21 weeks / 149 days

Jul 9, 2022

Begins

Jul 9, 2022

Discovered

Dec 5, 2022

Filed

vs. sector median

+14 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 5d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGNov 30 · first
California State AGNov 30 · first
Indiana State AGNov 30 · first
Maine State AGNov 30 · first
New Hampshire State AG+5d · this page

Pattern: first filing Nov 30 (MT), last Dec 5 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.