HackingEducationEducationCustomer Data InvolvedIdentity (basic)Government IDCredentialsMediumContained

Mount Saint Mary College

bd_71d734dae478fcce · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 8, 2023

To disclose

—

Affected

20state residents only

Linked

7 filings

Confidence

67%

Full breach record for Mount Saint Mary College →

Mount Saint Mary College reported a cybersecurity incident on December 20, 2022, where an unauthorized third party infiltrated its network. The breach potentially exposed student and faculty PII, including names, SSNs, passport numbers, and credentials. 20 New Hampshire residents were notified on February 7, 2023. The college engaged forensic specialists and is enhancing technical safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 20, 2022

Begins

Feb 8, 2023

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitecubabd_aa4f1d9fa53c3a122023-10-10 · +244dVerified by operator
Leak Sitevicesocietybd_7bf7529bd105d48a2023-02-09 · +1dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_fa2020f491d598a52023-02-09 · +1dVerified
Indiana State AGbd_6598b328c46558f12023-02-07 · +1dCandidate
Montana State AGbd_979e6ea0fe25e7632023-02-07 · +1dVerified
Massachusetts State AGbd_46d579e9965a22242023-02-14 · +6dVerified

Name: Mount Saint Mary College
norm: mount saint mary college
Domain: msmc.edu

Name: Mount Saint Mary College
norm: mount saint mary college
Domain: msmc.edu
Industry: Educationllm

Discovered: —
Breach occurred: Dec 20, 2022
Materiality determined: —
Notification sent: Feb 7, 2023
Affected individuals: 20state-resident count only
Data types: Identity (basic)Government IDCredentials
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Conducted an investigation with the assistance of third-party forensic specialists
Engaging in steps to confirm the security of any relevant systems
Reviewing and enhancing its technical safeguards and policies relating to the security of its systems and servers
Notification letters to these individuals are being mailed today February 7, 2023
Changes made: Reviewing and enhancing its technical safeguards and policies relating to the security of its systems and servers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGFeb 7 · first

Montana State AGFeb 7 · first

New Hampshire State AG+1d · this page

Maine State AG+2d

Massachusetts State AG+7d

Pattern: first filing Feb 7 (IN), last Feb 14 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mount-saint-mary-college-20230208.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 8, 2023
Raw hash: 93eb38e51040e7fe86975731d181af678171b052461414f94e5903b4c34a0d28

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityMount Saint Mary College

Victim entityMount Saint Mary College

IncidentUnauthorized Access

Stated responseConducted an investigation with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov