HackingEducationEducationStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIdentity (basic)Government IDEmploymentMediumContained

Teikyo Loretto Heights University

bd_40c0c6d037de223a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 23, 2016

Filed

Dec 23, 2016

To disclose

4 weeks

Affected

1state residents only

Confidence

65%

Full breach record for Teikyo Loretto Heights University →

Teikyo Loretto Heights University (d/b/a Colorado Heights University) notified the NH Attorney General of a breach involving unauthorized access to a vendor-hosted college management system. The incident occurred between Sept 10-13, 2016, and was discovered on Nov 23, 2016. Data exposed included student names, addresses, SSNs, and DOBs. One NH resident was notified.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 74 days

discovery → filing · 4 weeks / 30 days

Sep 10, 2016

Begins

Nov 23, 2016

Discovered

Dec 23, 2016

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: BAKER & HOSTETLER LLP
norm: baker hostetler

Name: Teikyo Loretto Heights University
norm: teikyo loretto heights university
Industry: Educationllm

Discovered: Nov 23, 2016
Breach occurred: Sep 10, 2016 – Sep 13, 2016
Undetected for: 74 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 23, 2016
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Began working with the vendor and an outside cybersecurity firm to determine what happened
Established a dedicated call center to assist individuals with any questions they may have
Offering those eligible a free one-year membership in credit monitoring and identity theft protection services from Experian
Changes made: Continue to work with its third-party vendor to implement enhanced security measures to help prevent something like this from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/telkyo-loretto-heights-20162323.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2016
Raw hash: 7856ad06321f08dbf7555352870327fbfd08ed35b89c4b38e38b97087610b5ad

Reporting entityBAKER & HOSTETLER LLP

Victim entityTeikyo Loretto Heights University

Incidentdiscovered Nov 23, 2016

Stated responseBegan working with the vendor and an outside cybersecurity firm to determine what happened

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov