DisclosureLens
Social EngineeringEducationEducationPhishingStolen CredentialsEmployee Data InvolvedGovernment IDIdentity (basic)CredentialsMediumContained

Southern New Hampshire University

bd_a1bc644e2d665bc7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 27, 2017

To disclose

—

Affected

5state residents only

Confidence

66%
Full breach record for Southern New Hampshire University →6 incidents on file

Southern New Hampshire University reported a data breach affecting five New Hampshire residents. Between June 1 and June 5, 2017, an unknown third party sent phishing emails from a hacked university address. Seven employees clicked malicious links and provided credentials, allowing unauthorized access to their accounts. The accessed software contained social security numbers and other government IDs. The university believes the objective was payroll theft but safeguards prevented success. Affected employees received one year of credit monitoring.

Incident timeline

Jun 1, 2017

Begins

Jul 27, 2017

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.