HackingEducationEducationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPIIMediumContained

New Horizons Computer Learning Centers, Inc.

bd_2d3fe94fad308e3b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 22, 2016

Filed

Oct 6, 2016

To disclose

6 weeks

Affected

1state residents only

Confidence

67%

Full breach record for New Horizons Computer Learning Centers, Inc. →2 incidents on file

New Horizons Computer Learning Centers South Florida notified NH AG of unauthorized network access discovered Aug 22, 2016. Incident affected 1 NH resident, exposing names, addresses, SSNs, and emails. Response included system security, perimeter hardening, and credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 45 days

Aug 22, 2016

Discovered

Oct 6, 2016

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: New Horizons Computer Learning Centers, Inc.
norm: new horizons computer learning centers
Also named: GEB Computer Training Limiteddba oflegal entity
New Horizons Computer Learning Centers South Floridadba oftrade name
Industry: Educationllm

Discovered: Aug 22, 2016
Materiality determined: —
Notification sent: Oct 6, 2016
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took action to secure its system
Conducted an investigation
Establishing more advanced internal security processes and procedures
Hardening the network perimeter
Implementing additional security measures
Offering potentially impacted individuals credit monitoring and identity protection services, at no cost to the individual, through Kroll
Changes made: Establishing more advanced internal security processes and procedures
Hardening the network perimeter
Implementing additional security measures to ensure the protection of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/new-horizons-computer-20161006.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 6, 2016
Raw hash: 7fc90d4257bf945ed84f5f4d792164bf1ee603ff8de39e7e74c6930b7f5ee635

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityNew Horizons Computer Learning Centers, Inc.

Incidentdiscovered Aug 22, 2016

Stated responseTook action to secure its system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov