AccidentalEducationEducationMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Allen Community College

bd_3c2bf34eadd1a528 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 19, 2019

Filed

Sep 18, 2019

To disclose

4 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Allen Community College →

Allen Community College notified the NH AG of a misconfiguration where a document containing student names and SSNs was inadvertently posted to a OneDrive location accessible by students. The incident occurred July 30–Aug 19, 2019. One NH student was notified and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 20 days

discovery → filing · 4 weeks / 30 days

Jul 30, 2019

Begins

Aug 19, 2019

Discovered

Sep 18, 2019

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_5d076ccb4d2f208a2019-09-17 · +1dVerified

Name: Allen Community College
norm: allen community college
Domain: allencc.edu

Name: Allen Community College
norm: allen community college
Domain: allencc.edu
Industry: Educationllm

Discovered: Aug 19, 2019
Breach occurred: Jul 30, 2019 – Aug 19, 2019
Undetected for: 20 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 18, 2019
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1535 Unused/Unsupported Cloud Storage
Regulator citations: Notified New Hampshire Attorney General

During the incident: Immediately removed the document from the OneDrive location
Offered the student a complimentary one-year membership in credit monitoring services through Experian
Taken steps to enhance its existing security processes related to posting information to OneDrive
Changes made: Taken steps to enhance its existing security processes related to posting information to OneDrive
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 17 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/allen-comunity-college-20190918.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 18, 2019
Raw hash: dcf223c6ea2eb9c600ba229647854099bbfc49cec4b0e1b3f2adabb8cff05c59

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAllen Community College

Victim entityAllen Community College

Incidentdiscovered Aug 19, 2019

Stated responseImmediately removed the document from the OneDrive location

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov