HackingEducationEducationCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDHighContained

Northeastern Technical College

bd_4615a38d341d9727 · schema v1 · pii pii-v1

Severity

High

Discovered

May 1, 2022

Filed

Jun 9, 2022

To disclose

6 weeks

Affected

20,195state residents only

Linked

3 filings

Confidence

65%

Full breach record for Northeastern Technical College →

Northeastern Technical College notified affected individuals of a data security incident in early May 2022 where an unauthorized third party accessed and exfiltrated archived data from a single server. The incident involved names and government-issued identifiers. NETC engaged forensic specialists, reset passwords, and provided 12 months of Kroll identity monitoring services.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due6 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 6 weeks / 39 days

May 1, 2022

Begins

May 1, 2022

Discovered

Jun 9, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesuncryptbd_14bc04d0230e89a32022-06-04 · +5dCandidate

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_e767692dbd87b49b2022-06-06 · +3dVerified

Name: Northeastern Technical College
norm: northeastern technical college
Domain: netc.edu

Name: Northeastern Technical College
norm: northeastern technical college
Domain: netc.edu
Industry: Educationllm

Discovered: May 1, 2022
Breach occurred: May 1, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 9, 2022
Affected individuals: 20,195state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: External
Regulator citations: Informed local law enforcementInformed the South Carolina State Law Enforcement Division

During the incident: Engaged forensic computer specialists
Informed local law enforcement and the South Carolina State Law Enforcement Division
Retained a leading forensics firm to investigate, contain the incident, assess the security of our systems, and remediate
Reset passwords of employees, faculty, and students
Reviewed existing security control policies
Implemented additional security measures, including advanced endpoint monitoring
Secured the services of Kroll to provide identity monitoring services
Changes made: Implemented additional security measures, including advanced endpoint monitoring
Continued with live monitoring of endpoints
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 6 · first

South Carolina State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/NortheasternTechnicalCollege.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 9, 2022
Raw hash: 5cfd8a6a7af04fea31cc218266c9416510590cbfa3c4aa36754d52e0981d9ef4

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityNortheastern Technical College

Victim entityNortheastern Technical College

Incidentdiscovered May 1, 2022

Stated responseEngaged forensic computer specialists

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov