MalwareEducationTechnologyEducationRansomwareStolen CredentialsRansom DemandedRansom PaidData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

STRIDE, INC.

bd_334e4aad324d3972 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 11, 2020

Filed

Jul 12, 2021

To disclose

35 weeks

Affected

15state residents only

Linked

9 filings

Confidence

66%

Full breach record for STRIDE, INC. →2 incidents on file

Stride Inc. filed a supplemental notice with the New Hampshire AG regarding a ransomware attack. The incident occurred between Nov 4-19, 2020. The breach affected NH residents' names and SSNs. Stride paid a ransom and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 35 weeks / 243 days

Nov 4, 2020

Begins

Nov 11, 2020

Discovered

Jul 12, 2021

Filed

vs. sector median

+26 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_138e1dab0273cd232021-07-06 · +6dVerified
Oregon State AGbd_19dc41e91d1ea0b92021-07-06 · +6dVerified
California State AGbd_305cdfe9ea057df02021-07-06 · +6dVerified
New Hampshire State AGbd_ad9939063527aa5a2021-06-18 · +24dVerified

Show 4 more filings ↓up to 31d gap

Indiana State AGbd_2e01c9fd34f00d2a2021-06-11 · +31dVerified
Maine State AGbd_4d30d9a2593863a12021-06-11 · +31dCandidate
Massachusetts State AGbd_59ec8c2650ce194a2021-06-11 · +31dVerified
Montana State AGbd_ffe7a3018f9a03f82021-06-11 · +31dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: STRIDE, INC.
norm: stride
Domain: stridelearning.com
Industry: EducationllmTechnologyllm

Discovered: Nov 11, 2020
Breach occurred: Nov 4, 2020 – Nov 19, 2020
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 11, 2021
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Locked down affected systems
Notified federal law enforcement authorities
Engaged third-party forensics team to investigate
Identified and removed all infected machines from the network
Undertook a top-to-bottom review of its security posture
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided access to credit monitoring services for twelve (12) months through Experian
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Working with outside security experts to ensure that it is taking all appropriate steps to protect its systems and to continue to reduce the risk of future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(243 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGJun 11 · first

Maine State AGJun 11 · first

Massachusetts State AGJun 11 · first

Montana State AGJun 11 · first

New Hampshire State AG+7d

Maine State AG+25d

Oregon State AG+25d

California State AG+25d

New Hampshire State AG+31d · this page

Pattern: first filing Jun 11 (IN), last Jul 12 (NH) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/stride-20210712.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 12, 2021
Raw hash: 7ee792f50ff3d957046eada3fa61e1c30a869cf8f902b8eec981ae669ed93316

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entitySTRIDE, INC.

Incidentdiscovered Nov 11, 2020

Stated responseLocked down affected systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov