HackingEducationEducationCustomer Data InvolvedPIIIdentity (basic)LowContained

Pratt Institute

bd_34207e9e66da9919 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 16, 2023

Filed

Jul 22, 2024

To disclose

31 weeks

Affected

45state residents only

Linked

7 filings

Confidence

65%

Full breach record for Pratt Institute →

Pratt Institute notified the New Hampshire Attorney General of a data security incident affecting 45 NH residents. Unauthorized access occurred Dec 13-16, 2023. Personal information was involved. Pratt engaged forensic investigators, reset passwords, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d31 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 3 days

discovery → filing · 31 weeks / 219 days

Dec 13, 2023

Begins

Dec 16, 2023

Discovered

Apr 23, 2024

Scope determined

Jul 22, 2024

Filed

vs. sector median

+23 wks slower

This filing is one of 7 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 184 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_abc17a4e47f04e672024-01-19 · +184dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_0b89eb0483eebef02024-07-19 · +3dVerified by operator
Maine State AGbd_47c004c3eede54a72024-07-19 · +3dCandidate
Vermont State AGbd_4e2bcd313fa153492024-07-19 · +3dVerified
Indiana State AGbd_5a5297bf804a36382024-07-19 · +3dVerified

Show 1 more filing ↓up to 3d gap

Montana State AGbd_cc6c3848e5a883322024-07-19 · +3dVerified

Name: Pratt Institute
norm: pratt institute
Domain: pratt.edu

Name: Pratt Institute
norm: pratt institute
Domain: pratt.edu
Industry: Educationllm

Discovered: Dec 16, 2023
Breach occurred: Dec 13, 2023 – Dec 16, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: Apr 23, 2024
Notification sent: Jul 19, 2024
Affected individuals: 45state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General of the State of New Hampshire

During the incident: Engaged a third-party forensic investigation firm to further investigate and to confirm the security of the Pratt environment
Undertook a comprehensive review of the files that may have been acquired by the unauthorized party
Notifying individuals whose personal information was involved in the incident
Providing them with information on how they can protect against fraudulent activity and identity theft
Offering complimentary credit monitoring and identity theft protection services
Resetting user account passwords
Changes made: Resetting user account passwords
Continually evaluating technical measures to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(219 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGJul 19 · first

Maine State AGJul 19 · first

Vermont State AGJul 19 · first

Indiana State AGJul 19 · first

Montana State AGJul 19 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pratt-institute-20240722.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2024
Raw hash: 4b96dede8582bc5ddb172ff1793eeb24c0d5610629acb29ef9ea438fa2ef8873

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityPratt Institute

Victim entityPratt Institute

Incidentdiscovered Dec 16, 2023

Stated responseEngaged a third-party forensic investigation firm to further investigate and to confirm the security of the Pratt environment

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov