HackingTechnologyInformationBrute ForceStolen CredentialsTargetedIdentity (basic)Government IDPIIMediumContained

Strategic Technology Institute, Inc.

bd_82ca208896d6e7ae · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 25, 2021

Filed

Aug 30, 2021

To disclose

9 weeks

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Strategic Technology Institute, Inc. →

Strategic Technology Institute, Inc. notified the NH AG of a security incident affecting 1 NH resident. On June 25, 2021, STi discovered an HR email account compromised via brute force attack. Potentially accessed data included names, addresses, SSNs, and employee IDs. Notifications were sent on August 23, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 66 days

Jun 25, 2021

Discovered

Aug 30, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_0e0e4d4a759e99fe2021-08-23 · +7dCandidate
Massachusetts State AGbd_579de34d8ea600202021-08-23 · +7dVerified
Indiana State AGbd_d86fb0361fdb3e192021-08-23 · +7dVerified

Name: Strategic Technology Institute, Inc.
norm: strategic technology institute

Name: Strategic Technology Institute, Inc.
norm: strategic technology institute
Industry: Technologyllm

Discovered: Jun 25, 2021
Materiality determined: —
Notification sent: Aug 23, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1110 Brute ForceT1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Blocked access to the compromised account
Secured account logins
Implemented Two-Factor Authentication for employees to log-in to their STi Microsoft accounts
Implemented certain access restrictions to files containing employee information
Changes made: Implemented Two-Factor Authentication for employees to log-in to their STi Microsoft accounts
Implemented certain access restrictions to files containing employee information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGAug 23 · first

Massachusetts State AGAug 23 · first

Indiana State AGAug 23 · first

New Hampshire State AG+7d · this page

Pattern: first filing Aug 23 (MT), last Aug 30 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/strategic-technology-institute-20210830.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2021
Raw hash: 73710b6304d74719ca9111f04d55336ea6b09dd97bdb1643e6ca2134bf6cb5c7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityStrategic Technology Institute, Inc.

Victim entityStrategic Technology Institute, Inc.

Incidentdiscovered Jun 25, 2021

Stated responseBlocked access to the compromised account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov