HackingCustomer Data InvolvedIdentity (basic)Government IDEducationHealth (basic)MediumContained

Mikhail Education Corporation

bd_9de3ea095463e5e4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 19, 2019

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

45%

Full breach record for Mikhail Education Corporation →

Mikhail Education Corporation said two company email accounts were compromised by a malicious third-party actor between March 20 and 26, and it believes they were secured within approximately 42 and 16 minutes. Names, Social Security numbers, driver’s license numbers, passport information, educational records and/or medical information may have been accessed; of medical information, only test names were potentially accessed. It said it had no evidence of actual or attempted misuse.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 20, 2019

Begins

Apr 19, 2019

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_3009664cd8d9b47e2019-04-19Verified

Name: Mikhail Education Corporation
norm: mikhail education

Name: Mikhail Education Corporation
norm: mikhail education

Discovered: —
Breach occurred: Mar 20, 2019 – Mar 26, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEducationHealth (basic)
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Took measures to secure the email accounts immediately after learning of the incident
Continuing to investigate the breach and take steps to mitigate any harm and prevent further disclosures
Contacting all students affected by this incident to notify them of the potential disclosure
Offering a complimentary two-year membership to Experian’s IdentityWorks, at no cost
Changes made: Reviewing policies, procedures, and security systems to determine what changes are appropriate to protect personal information stored on its system
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGApr 19 · first

Montana State AGApr 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-Data-Breach-Letter-Multistate-FINAL.docx
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2019
Raw hash: 19d2bbc97abc7b22a1ccf3543f2611713ea2e53e8276565abb9538472f8dc3bb

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMikhail Education Corporation

Victim entityMikhail Education Corporation

IncidentUnauthorized Access

Stated responseTook measures to secure the email accounts immediately after learning of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov