HackingEducationEducationData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)PHIMediumContained

Oakwood University

bd_794e6f385499acf4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 14, 2022

Filed

May 13, 2022

To disclose

9 weeks

Affected

4state residents only

Confidence

66%

Full breach record for Oakwood University →2 incidents on file

Oakwood University notified the New Hampshire Attorney General of a cybersecurity incident discovered on March 14, 2022. Unauthorized access occurred between March 7 and March 14, 2022, potentially exposing personal information of Plan members, including names, SSNs, and DOB. Four New Hampshire residents were notified on May 13, 2022, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 9 weeks / 60 days

Mar 7, 2022

Begins

Mar 14, 2022

Discovered

May 13, 2022

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Oakwood University
norm: oakwood university
Domain: oakwood.edu

Name: Oakwood University
norm: oakwood university
Domain: oakwood.edu
Industry: Educationllm

Discovered: Mar 14, 2022
Breach occurred: Mar 7, 2022 – Mar 14, 2022
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 13, 2022
Affected individuals: 4state-resident count only
Data types: Government IDIdentity (basic)PHI
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: exploit_public_facing

During the incident: Took measures to secure its network
Launched an investigation
Engaged a cybersecurity firm to assist
Provided written notice via United States Postal Service First Class mail to four (4) affected New Hampshire residents
Offered a complimentary one-year membership in credit monitoring and identity theft protection services
Established a dedicated, toll-free call center
Changes made: Took measures to secure its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/oakwood-20220513.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 13, 2022
Raw hash: 535e2e904564e66df9f4539833d08ef8ee15e254974d348e8956ae9f9b79edae

Reporting entityOakwood University

Victim entityOakwood University

Incidentdiscovered Mar 14, 2022

Stated responseTook measures to secure its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov