MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
R3 Education
bd_9e69937e0c530840 · schema v1 · pii pii-v1
Full breach record for R3 Education →R3 Education Inc. notified the New Hampshire Attorney General of a cybersecurity incident discovered on November 7, 2023. An unauthorized party gained access to systems, encrypted data (ransomware), and potentially exfiltrated information. The breach affected 7,785 individuals, including 18 New Hampshire residents (employees and students). Data types included names, SSNs, and DOBs. R3 engaged forensic investigators, reset credentials, and offered credit monitoring. Notices were mailed starting March 25, 2024.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_aa05df0b3364d3e0Maine State AGfiled 2024-05-28Verified
- bd_ba7f4c07ddee5ab4California State AGfiled 2024-05-28Verified
- bd_e1c177816da456d5Montana State AGfiled 2024-05-24(4d gap)Candidate
- bd_e0a16b5a6841313cIndiana State AGfiled 2024-03-25(64d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/r3-education-20240528.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2024
- Raw hash
- 657e171218049081d6f45cade0b5865952cd168a303c4ee109c8d3a0905c5300
Reporting entity
- Name
- R3 Educationnorm: r3 education
Victim entity
- Name
- R3 Educationnorm: r3 education
Incident
- Discovered
- Nov 7, 2023
- Materiality determined
- —
- Notification sent
- Mar 25, 2024
- Affected individuals
- 7,785
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 29 weeks(203 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.