HackingEducationEducationStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Higher Education Servicing Corporation

bd_910996abbb478f17 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2021

Filed

Feb 15, 2021

To disclose

≤1 day

Affected

12state residents only

Linked

4 filings

Confidence

66%

Full breach record for Higher Education Servicing Corporation →

Higher Education Servicing Corporation (HESC) notified individuals of a data breach where an unauthorized third party accessed a single email account containing personal information. The unauthorized access occurred between October 25, 2020, and January 4, 2021. HESC determined the breach on February 15, 2021, engaged forensic investigators, and offered one year of credit monitoring. No evidence of fraud was found.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 113 days

discovery → filing · ≤1 day / 0 days

Oct 25, 2020

Begins

Feb 15, 2021

Discovered

Feb 15, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_29f07e5a9b7fdfc52021-04-05 · +49dVerified
Maine State AGbd_49129ef0e577ebcf2021-04-05 · +49dVerified by operator
Massachusetts State AGbd_5e1b656c91d0f76d2021-04-05 · +49dVerified

Name: Higher Education Servicing Corporation
norm: higher education servicing

Name: Higher Education Servicing Corporation
norm: higher education servicing
Industry: Educationllm

Discovered: Feb 15, 2021
Breach occurred: Oct 25, 2020 – Jan 4, 2021
Undetected for: 113 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 12state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Controlled the incident by preventing any further access to the email account
Engaged a forensic security firm to investigate and confirm the security of our email and computer systems
Reviewed the account’s contents to determine if it contained any personal information
Worked to locate current contact information and notify individuals as quickly as possible
Offering a complimentary one-year membership of Experian IdentityWorks SM Credit 3B
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGFeb 15 · first · this page

Indiana State AG+49d

Maine State AG+49d

Massachusetts State AG+49d

Pattern: first filing Feb 15 (MT), last Apr 5 (MA) — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Higher-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2021
Raw hash: 30a509490e913b354f3b3087e3fba08e29e039f04181f01b4d664841cfd06a74

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHigher Education Servicing Corporation

Victim entityHigher Education Servicing Corporation

Incidentdiscovered Feb 15, 2021

Stated responseControlled the incident by preventing any further access to the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov