MalwareEducationTechnologyEducationRansomwareRansom DemandedRansom PaidData EncryptedData ExfiltratedIdentity (basic)Government IDMediumContained

STRIDE, INC.

bd_ad9939063527aa5a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 11, 2020

Filed

Jun 18, 2021

To disclose

31 weeks

Affected

26state residents only

Linked

9 filings

Confidence

66%

Full breach record for STRIDE, INC. →2 incidents on file

Stride Inc. reported a ransomware attack occurring between Nov 4-19, 2020, discovered Nov 11, 2020. The incident affected 26 New Hampshire residents, exposing names, SSNs, and passport info. Stride paid the ransom, engaged forensic investigators, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 31 weeks / 219 days

Nov 4, 2020

Begins

Nov 11, 2020

Discovered

Jun 18, 2021

Filed

vs. sector median

+23 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_2e01c9fd34f00d2a2021-06-11 · +7dVerified
Maine State AGbd_4d30d9a2593863a12021-06-11 · +7dCandidate
Massachusetts State AGbd_59ec8c2650ce194a2021-06-11 · +7dVerified
Montana State AGbd_ffe7a3018f9a03f82021-06-11 · +7dCandidate

Show 4 more filings ↓up to 24d gap

Maine State AGbd_138e1dab0273cd232021-07-06 · +18dVerified
Oregon State AGbd_19dc41e91d1ea0b92021-07-06 · +18dVerified
California State AGbd_305cdfe9ea057df02021-07-06 · +18dVerified
New Hampshire State AGbd_334e4aad324d39722021-07-12 · +24dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: STRIDE, INC.
norm: stride
Domain: stridelearning.com
Industry: EducationllmTechnologyllm

Discovered: Nov 11, 2020
Breach occurred: Nov 4, 2020 – Nov 19, 2020
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 11, 2021
Affected individuals: 26state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement authorities

During the incident: Took steps to lock down affected systems
Notified federal law enforcement authorities
Began working with a third-party forensics team to investigate
Identified and removed all infected machines from the network
Undertook a top-to-bottom review of its security posture
Provided access to credit monitoring services for twelve (12) months through Experian
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Working with outside security experts to ensure that it is taking all appropriate steps to protect its systems and to continue to reduce the risk of future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(219 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGJun 11 · first

Maine State AGJun 11 · first

Massachusetts State AGJun 11 · first

Montana State AGJun 11 · first

New Hampshire State AG+7d · this page

Maine State AG+25d

Oregon State AG+25d

California State AG+25d

New Hampshire State AG+31d

Pattern: first filing Jun 11 (IN), last Jul 12 (NH) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/stride-20210618.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2021
Raw hash: f5f8cc1e9be400f4f51712353ffe8793c3bc20248bdca280fc9746572872c851

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entitySTRIDE, INC.

Incidentdiscovered Nov 11, 2020

Stated responseTook steps to lock down affected systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov