AccidentalEducationEducationMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDHighContained

New England Law

bd_764f37a4f021c349 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 1, 2007

Filed

Oct 29, 2007

To disclose

28 days

Affected · nationwide

5,098151 in this filing

Linked

2 filings

Confidence

68%

Full breach record for New England Law →

New England School of Law notified NH AG that personal info (SSN, DOB, name, address, phone) of 5,098 alumni was accessible via Google search due to a website misconfiguration in mid-October 2007. 151 NH residents affected. Notices to be sent.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Oct 1, 2007

Discovered

Oct 29, 2007

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_d1ce96bc3ef6213d2007-10-30 · +1dVerified

Name: New England Law
norm: new england law
Domain: nesl.edu

Name: New England Law
norm: new england law
Domain: nesl.edu
Industry: Educationllm

Discovered: Oct 1, 2007
Materiality determined: —
Notification sent: —
Affected individuals: 5,098state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Misconfiguration
MITRE ATT&CK: T1530 Data from Cloud Storage Object
Regulator citations: Notified New Hampshire Attorney General

During the incident: Immediately removed the page from the New England School of Law website
Conducted research into the incident
Soon will begin notifying affected alumni by personal letter
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGOct 29 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/new-england-law-20071029.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 29, 2007
Raw hash: 9376d617c3fad0be805954a395ed008fc4a1911e6608342cf9fd3d39fb11f7e2

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNew England Law

Victim entityNew England Law

Incidentdiscovered Oct 1, 2007

Stated responseImmediately removed the page from the New England School of Law website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov