AccidentalEducationHealthcareEducationMisconfigurationCustomer Data InvolvedGovernment IDHealth (basic)PHIMediumResolved

University of New Hampshire Research Computing Center

bd_6b79564d0a191df2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 18, 2015

To disclose

—

Affected

2state residents only

Confidence

67%

Full breach record for University of New Hampshire Research Computing Center →

University of New Hampshire Research Computing Center notified NH AG of a data security breach on March 23, 2015, where sensitive information for two individuals (including SSNs and Medicaid Provider Numbers) was submitted to a web server over an unencrypted session. The issue was corrected and affected individuals were notified.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 23, 2015

Begins

Aug 18, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: University of New Hampshire Research Computing Center
norm: university of new hampshire research computing center

Name: University of New Hampshire Research Computing Center
norm: university of new hampshire research computing center
Industry: EducationllmHealthcarellm

Discovered: —
Breach occurred: Mar 23, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Government IDHealth (basic)PHI
Attack vector: Misconfiguration
Regulator citations: Notified New Hampshire Attorney General in accordance with RSA 359: C-20

During the incident: Corrected the issue which allowed unencrypted submission
Provided affected individuals with appropriate notification
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/university-nh-information-security-20150817.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 18, 2015
Raw hash: a59703757a530f809bc5522176579bf66b1a70c6dc916ad5b152922ced0b7548

Reporting entityUniversity of New Hampshire Research Computing Center

Victim entityUniversity of New Hampshire Research Computing Center

IncidentMisconfiguration

Stated responseCorrected the issue which allowed unencrypted submission

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov