PhysicalEducationEducationTheftOpportunisticCustomer Data InvolvedIdentity (basic)Government IDHighActive

University of Plymouth

bd_638e3eae6f9acffb · schema v1 · pii pii-v1

Severity

High

Discovered

May 18, 2011

Filed

Jun 28, 2011

To disclose

6 weeks

Affected

1,059state residents only

Confidence

66%

Full breach record for University of Plymouth →

Plymouth State University notified the NH Attorney General of a missing external hard drive containing a spreadsheet with names and SSNs of 1,059 teacher education students. Discovered May 18, 2011. Notifications sent June 28, 2011, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 41 days

May 18, 2011

Discovered

Jun 28, 2011

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,059 affectedView incident

Name: University of Plymouth
norm: university of plymouth
Domain: plymouth.ac.uk

Name: University of Plymouth
norm: university of plymouth
Domain: plymouth.ac.uk
Industry: Educationllm

Discovered: May 18, 2011
Materiality determined: —
Notification sent: Jun 28, 2011
Affected individuals: 1,059state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified Consumer Protection Bureau, NH Department of Justice

During the incident: Mounted an effort to locate the drive
Filed an incident report with Plymouth State University Police
Conducted an investigation by Officer Jennifer Frank
Sent an email notification to each person listed on the spreadsheet
Set up a dedicated telephone line to receive and respond to inquiries
Offered 12 months of complimentary credit monitoring through Experian
Included a link to identity theft information from the Federal Trade Commission
Changes made: Offered 12 months of complimentary credit monitoring through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/plymouth-state-20110628.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2011
Raw hash: d97e658cc06f2922f6f195694ee5d3ee1ed9fd671b704880371eededa78f344a

Reporting entityUniversity of Plymouth

Victim entityUniversity of Plymouth

Incidentdiscovered May 18, 2011

Stated responseMounted an effort to locate the drive

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov