HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Gaston College
bd_930490fe30ca1f2d · schema v1 · pii pii-v1
Full breach record for Gaston College →Gaston College notified New Hampshire residents of unauthorized network access occurring Feb 21-22, 2023. The college detected suspicious activity on Feb 22, 2023, and engaged federal law enforcement and third-party specialists. Approximately 20 NH residents were affected, with data including identity and government IDs potentially accessed. The college provided credit monitoring via Kroll and implemented additional security safeguards.
Leak gap clock⏱ Leak >90d27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed20 affectedView incident
A leak claim by nokoyawa about this victim predates this filing by 172 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gaston-college-20230829.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2023
- Raw hash
- bfbd0693ee0625afe4ba2ff98c5b1e4b84551172a506d0e5d3120149287a30a1
Reporting entity
- Name
- Gaston Collegenorm: gaston college
- Domain
- gaston.edu
Victim entity
- Name
- Gaston Collegenorm: gaston college
- Domain
- gaston.edu
Incident
- Discovered
- Feb 22, 2023
- Materiality determined
- Jul 11, 2023
- Notification sent
- Aug 25, 2023
- Affected individuals
- 20
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProvided written notice to relevant state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 27 weeks(188 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.