HackingTechnologyFinancial ServicesInformationStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Newcourse Communications

bd_50f87e1f7f40faf0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2023

Filed

Mar 9, 2023

To disclose

22 days

Affected

1state residents only

Linked

3 filings

Confidence

65%

Full breach record for Newcourse Communications →2 incidents on file

Newcourse Communications, Inc. notified Montana residents of unauthorized network access occurring April 27-May 3, 2022. The company discovered on Feb 15, 2023 that full names and financial account information were exfiltrated. Affected individuals were offered 12 months of credit monitoring and identity theft protection via IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 294 days

discovery → filing · 22 days

Apr 27, 2022

Begins

Feb 15, 2023

Discovered

Mar 9, 2023

Filed

vs. sector median

16 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_31f16fe6c047d4602023-03-14 · +5dVerified
Maine State AGbd_f58e0ec051bd1f8b2023-03-14 · +5dVerified by operator

Name: Newcourse Communications
norm: newcourse communications
Domain: newcoursecc.com

Name: Newcourse Communications
norm: newcourse communications
Domain: newcoursecc.com
Industry: TechnologyllmFinancial Servicesllm

Discovered: Feb 15, 2023
Breach occurred: Apr 27, 2022 – May 3, 2022
Undetected for: 294 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 7, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Offering identity theft protection services through IDX
Provided 12 months of credit and CyberScan monitoring
Provided a $1,000,000 insurance reimbursement policy
Provided fully managed id theft recovery services
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGMar 9 · first · this page

Massachusetts State AG+5d

Maine State AG+5d

Pattern: first filing Mar 9 (MT), last Mar 14 (ME) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-830.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 9, 2023
Raw hash: ca5605898c6ae4c99d4ae7e52a734cb9e7aaa52abb5811d3e504570f4b506551

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNewcourse Communications

Victim entityNewcourse Communications

Incidentdiscovered Feb 15, 2023

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov