HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Cambridge University Press & Assessment
bd_443cd1e253127d97 · schema v1 · pii pii-v1
Full breach record for Cambridge University Press & Assessment →Cambridge University Press & Assessment (CUPA) notified the New Hampshire Attorney General of a network intrusion where an unauthorized actor exfiltrated data on June 5, 2024. CUPA discovered the incident on June 5, 2024, but did not determine the specific data types or identify affected New Hampshire residents until April 8, 2025. Notifications were mailed to 53 NH residents on April 23, 2025, offering credit monitoring and identity restoration services.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9286818ff200a923Indiana State AGfiled 2025-04-23Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cambridge-university-press-assessment-20250423.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2025
- Raw hash
- a5899ebc7409befec9f1f7789d7978549e25b6d9a360c7a0d58cdacf05e89a50
Reporting entity
- Name
- Cambridge University Press & Assessmentnorm: cambridge university press assessment
Victim entity
- Name
- Cambridge University Press & Assessmentnorm: cambridge university press assessment
Incident
- Discovered
- Jun 5, 2024
- Materiality determined
- Apr 8, 2025
- Notification sent
- Apr 23, 2025
- Affected individuals
- 53
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 46 weeks(322 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.