HackingEducationEducationCustomer Data InvolvedIdentity (basic)Government IDHighResolved

The New Hampton School

bd_aa12622b18ccb947 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 17, 2020

Filed

Jan 14, 2021

To disclose

28 days

Affected · nationwide

2,08063 in this filing

Linked

5 filings

Confidence

50%

Full breach record for The New Hampton School →

New Hampton School, an educational institution, reported a data breach that occurred between February and May 2020. The breach was an external system breach (hacking) discovered in December 2020. The personal information of 2,080 individuals was compromised, including names and Social Security numbers. The 63 affected Maine residents were notified in January 2021 and offered 24 months of complimentary credit monitoring services through CyberScout.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Dec 17, 2020 → Filed with AG Jan 14, 202128d ✓ ME AG ≤30d28 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 314 days

discovery → filing · 28 days

Feb 7, 2020

Begins

Dec 17, 2020

Discovered

Jan 14, 2021

Filed

This filing is one of 5 filings about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_302f77c076bc392d2021-01-11 · +3dVerified
Montana State AGbd_8a53006b6aa4b1ea2021-01-11 · +3dCandidate
New Hampshire State AGbd_039fa314946e593e2021-01-19 · +5dVerified
Massachusetts State AGbd_100089e9e4e4ae8f2021-01-22 · +8dVerified

Name: The New Hampton School
norm: the new hampton school

Name: The New Hampton School
norm: the new hampton school
Industry: Educationllm

Discovered: Dec 17, 2020
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 314 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 11, 2021
Affected individuals: 2,080state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 24 months of complimentary credit monitoring services through CyberScout.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: ME AG ≤30d · 28d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Dec 17, 2020
→ Filed with AG: Jan 14, 2021
28d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Dec 17, 2020 → Filed with AG: Jan 14, 2021	28d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 11 · first

Montana State AGJan 11 · first

Maine State AG+3d · this page

New Hampshire State AG+8d

Massachusetts State AG+11d

Pattern: first filing Jan 11 (IN), last Jan 22 (MA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/817b8272-0c33-49a9-bab0-89f519b535aa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 14, 2021
Raw hash: c5c9a9523ce8a9897671ef93c445d60360db83e4646a95965c7f1534db9b5f25

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe New Hampton School

Victim entityThe New Hampton School

Incidentdiscovered Dec 17, 2020

Stated responseOffered 24 months of complimentary credit monitoring services through CyberScout.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov