HackingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Institute of Culinary Education
bd_2a7d823e75938fd3 · schema v1 · pii pii-v1
Full breach record for Institute of Culinary Education →Institute of Culinary Education notified NH AG of unauthorized access on or around May 5, 2025. An actor copied files containing names and SSNs. 34 NH residents affected. Investigation completed Aug 26, 2025. Notices sent Sept 26, 2025. Forensic investigation engaged; credit monitoring offered.
Leak gap clock⏱ Leak >90d22 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by payoutsking about this victim predates this filing by 131 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4c07637677e4b748Indiana State AGfiled 2025-10-06Verified
- bd_76c86c55a1736a8eVermont State AGfiled 2025-10-06Verified
- bd_de4f194ba8ae1486Montana State AGfiled 2025-10-06Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/institute-culinary-education-20251006.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 6, 2025
- Raw hash
- 916fcb1d4ad3befbb22088ddc7dd974d6b4447fe4de48e07e1396c0a979bf296
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Institute of Culinary Educationnorm: institute of culinary education
- Domain
- ice.edu
Incident
- Discovered
- May 5, 2025
- Materiality determined
- —
- Notification sent
- Sep 26, 2025
- Affected individuals
- 34
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Department of EducationProvided written notice to relevant state and federal regulatorsNotified Equifax, Experian, and TransUnion
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.