HackingEducationTechnologyEducationStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

EdisonLearning, Inc.

bd_9b2bd352340c21c4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 17, 2023

Filed

Feb 20, 2024

To disclose

49 weeks

Affected

70scope not determined

Linked

7 filings

Confidence

66%

Full breach record for EdisonLearning, Inc. →2 incidents on file

EdisonLearning, Inc. reported an unauthorized access event occurring between March 7 and March 17, 2023. The company detected suspicious activity on March 17, 2023, and engaged third-party specialists. An unauthorized actor downloaded files containing personal information, including SSNs and financial account data. Approximately 70 Rhode Island residents were impacted. EdisonLearning contacted law enforcement, enhanced security procedures, and offered 12-24 months of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d49 weeks discovery → filing

Incident timeline

undetected · 10 days

discovery → filing · 49 weeks / 340 days

Mar 7, 2023

Begins

Mar 17, 2023

Discovered

Feb 20, 2024

Filed

vs. sector median

+40 wks slower

This filing is one of 7 about the same incident.View merged incident

A leak claim by blacksuit about this victim predates this filing by 300 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_ee99f0a969b46a402023-04-26 · +300dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_4ed98c42ae54c9882024-02-21 · +1dCandidate
Maine State AGbd_645c7bbc536acbe92024-02-21 · +1dVerified
Vermont State AGbd_9150f71082692ed62024-02-21 · +1dVerified
Massachusetts State AGbd_e4f57a4b6f020bc42024-02-21 · +1dVerified by operator

Show 1 more filing ↓up to 1d gap

California State AGbd_f3eb2f211670011f2024-02-21 · +1dVerified

Name: EdisonLearning, Inc.
norm: edisonlearning
Domain: edisonlearning.com

Name: EdisonLearning, Inc.
norm: edisonlearning
Domain: edisonlearning.com
Industry: EducationllmTechnologyllm

Discovered: Mar 17, 2023
Breach occurred: Mar 7, 2023 – Mar 17, 2023
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 70scope not determined
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took steps to secure our systems
Launched an investigation into the nature and scope of the activity with the assistance of third-party specialists
Contacted law enforcement
Offering you access to 12/24 months of credit monitoring and identity theft protection services through Equifax at no cost to you
Changes made: Reviewed our security policies and enhanced our procedures to reduce the risk of similar future events
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 49 weeks(340 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

New Hampshire State AGFeb 20 · first · this page

Indiana State AG+1d

Maine State AG+1d

Vermont State AG+1d

Massachusetts State AG+1d

California State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/edisonlearning-20240220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2024
Raw hash: b9835a23c9577586dc0b7df529d3558db0b2fbc580db2f100826bfebef9dcc34

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityEdisonLearning, Inc.

Victim entityEdisonLearning, Inc.

Incidentdiscovered Mar 17, 2023

Stated responseTook steps to secure our systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov