HackingEducationEducationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)CredentialsLowActive

Berkeley College

bd_9f34dbd441b96ff8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 31, 2016

Filed

Feb 6, 2017

To disclose

5 weeks

Affected

15state residents only

Linked

2 filings

Confidence

67%

Full breach record for Berkeley College →

Berkeley College notified the NH Attorney General on Feb 6, 2017, of a breach discovered Dec 31, 2016, affecting 15 NH residents. Unauthorized access exposed names, IDs, usernames, emails, and default passwords. No SSNs or financial data were compromised. Law enforcement was notified, and affected individuals were required to reset passwords. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 37 days

Dec 31, 2016

Discovered

Feb 6, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_9ea8a99c35b6222f2017-02-06Candidate

Name: Berkeley College
norm: berkeley college

Name: Berkeley College
norm: berkeley college
Industry: Educationllm

Discovered: Dec 31, 2016
Materiality determined: —
Notification sent: Feb 6, 2017
Affected individuals: 15state-resident count only
Data types: Identity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Contacted federal law enforcement
Required affected students, faculty, and staff to change their passwords
Conducting an investigation into the circumstances surrounding the incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGFeb 6 · first

New Hampshire State AGFeb 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/berkeley-college-20170206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2017
Raw hash: c75419df06f8c7f3ef94dcdcdc59b3c5e62c18eb21f72dbda8b357b8ae2bb31c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBerkeley College

Victim entityBerkeley College

Incidentdiscovered Dec 31, 2016

Stated responseContacted federal law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov