HackingEducationEducationStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

Gaston College

bd_930490fe30ca1f2d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 22, 2023

Filed

Aug 29, 2023

To disclose

27 weeks

Affected

20state residents only

Linked

9 filings

Confidence

65%

Full breach record for Gaston College →

Gaston College notified New Hampshire residents of unauthorized network access occurring Feb 21-22, 2023. The college detected suspicious activity on Feb 22, 2023, and engaged federal law enforcement and third-party specialists. Approximately 20 NH residents were affected, with data including identity and government IDs potentially accessed. The college provided credit monitoring via Kroll and implemented additional security safeguards.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d27 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 27 weeks / 188 days

Feb 21, 2023

Begins

Feb 22, 2023

Discovered

Jul 11, 2023

Scope determined

Aug 29, 2023

Filed

vs. sector median

+18 wks slower

This filing is one of 9 about the same incident.View merged incident

A leak claim by nokoyawa about this victim predates this filing by 172 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitesnatchbd_9f324ce3f5933d572023-04-02 · +149dVerified by operator
Leak Sitenokoyawabd_398ba9c747a25eb22023-03-09 · +173dVerified by operator

Regulatory filings (6) · sorted by filing gap

South Carolina State AGbd_1b93a11525bbc5db2023-08-29Verified
Massachusetts State AGbd_31263361e9a984602023-08-29Verified
Maine State AGbd_f4c0d005bff0a19a2023-08-29Verified
Montana State AGbd_115feb0035c68f6a2023-08-28 · +1dVerified

Show 2 more filings ↓up to 4d gap

Indiana State AGbd_53511d0b016ed9812023-08-25 · +4dCandidate
Vermont State AGbd_8dd8588b89e6f20b2023-08-25 · +4dVerified

Name: Gaston College
norm: gaston college
Domain: gaston.edu

Name: Gaston College
norm: gaston college
Domain: gaston.edu
Industry: Educationllm

Discovered: Feb 22, 2023
Breach occurred: Feb 21, 2023 – Feb 22, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: Jul 11, 2023
Notification sent: Aug 25, 2023
Affected individuals: 20state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified federal law enforcementProvided written notice to relevant state and federal regulators
Initial access: valid_credentials

During the incident: Moved quickly to investigate and respond to the event
Assessed the security of Gaston College systems
Identified potentially affected individuals
Notified federal law enforcement regarding the event
Engaged a third-party specialist to conduct a comprehensive programmatic and manual review
Provided access to credit monitoring services through Kroll
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided written notice to relevant state and federal regulators
Provided written notice to the three major credit reporting agencies
Changes made: Implementing additional safeguards and training for its employees
Reviewing existing policies and procedures
Implementing additional administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(188 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGAug 25 · first

Vermont State AGAug 25 · first

Montana State AG+3d

South Carolina State AG+4d

Massachusetts State AG+4d

Maine State AG+4d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gaston-college-20230829.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2023
Raw hash: bfbd0693ee0625afe4ba2ff98c5b1e4b84551172a506d0e5d3120149287a30a1

Linked disclosures

Ransomware claims (2)

Regulatory filings (6) · sorted by filing gap

Reporting entityGaston College

Victim entityGaston College

Incidentdiscovered Feb 22, 2023

Stated responseMoved quickly to investigate and respond to the event

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov