HackingTechnologyFinancial ServicesInformationStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Newcourse Communications

bd_9f436faa7652dd3c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 5, 2022

Filed

Aug 18, 2022

To disclose

13 days

Affected

9state residents only

Linked

22 filings

Confidence

64%

Full breach record for Newcourse Communications →2 incidents on file

Newcourse Communications, Inc. notified Montana residents of a data breach where unauthorized network access occurred between April 27 and May 3, 2022. The company discovered the exposure of personal information, including government IDs and financial data, on August 5, 2022. Affected individuals were offered 24 months of credit monitoring and identity theft recovery services through IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 100 days

discovery → filing · 13 days

Apr 27, 2022

Begins

Aug 5, 2022

Discovered

Aug 18, 2022

Filed

vs. sector median

17 wks faster

This filing is one of 22 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_bf5ce53274f026bc2022-10-20 · +63dVerified
Maine State AGbd_162ec875b80cff572022-10-23 · +66dVerified by operator
Massachusetts State AGbd_d1dd6ed547312c252022-10-23 · +66dVerified
New Hampshire State AGbd_a829d9b14093375b2022-10-24 · +67dVerified

Show 6 more filings ↓up to 93d gap

California State AGbd_da8cccd6047f90ca2022-10-28 · +71dVerified by operator
Massachusetts State AGbd_5fadd5173c94563f2022-10-29 · +72dVerified
Maine State AGbd_84fe1f7d14f65eaa2022-10-29 · +72dVerified by operator
Indiana State AGbd_2a5cd69b05306de32022-11-04 · +78dVerified
New Hampshire State AGbd_be556e9d554f359c2022-11-07 · +81dVerified
Maine State AGbd_3407f702f28d99cf2022-11-19 · +93dVerified by operator

Showing first 10 of 21 linked disclosures.

Name: Newcourse Communications
norm: newcourse communications
Domain: newcoursecc.com

Name: Newcourse Communications
norm: newcourse communications
Domain: newcoursecc.com
Industry: TechnologyllmFinancial Servicesllm

Discovered: Aug 5, 2022
Breach occurred: Apr 27, 2022 – May 3, 2022
Undetected for: 100 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 18, 2022
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Offering complimentary credit monitoring services through IDX
Offering 24 months of credit and CyberScan monitoring
Offering a $1,000,000 insurance reimbursement policy
Offering fully managed ID theft recovery services
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Montana State AGAug 18 · first · this page

Indiana State AG+63d

Maine State AG+66d

Massachusetts State AG+66d

New Hampshire State AG+67d

California State AG+71d

Massachusetts State AG+72d

Maine State AG+72d

Indiana State AG+78d

New Hampshire State AG+81d

Maine State AG+93d

Pattern: first filing Aug 18 (MT), last Nov 19 (ME) — a 93-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 21 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-522.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 18, 2022
Raw hash: 21eb5061260a85c9832974ebb363909c16af503557df2a7c82475fd53da178d9

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityNewcourse Communications

Victim entityNewcourse Communications

Incidentdiscovered Aug 5, 2022

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov