MalwareEducationEducationRansomwareData ExfiltratedCustomer Data InvolvedRansom DemandedGovernment IDIdentity (basic)MediumContained

LEARN Regional Education Service Center

bd_b144208d2590ba98 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 23, 2025

Filed

May 26, 2026

To disclose

13 months

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for LEARN Regional Education Service Center →

LEARN Regional Educational Service Center reported a ransomware incident to the New Hampshire Attorney General on May 26, 2026. The incident occurred on or around April 21, 2025, and was discovered on April 23, 2025. One New Hampshire resident was affected, with their name and Social Security Number compromised. LEARN engaged forensic experts, notified law enforcement, and provided the affected individual with 12 months of credit monitoring and identity theft recovery services through Epiq.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 13 months / 398 days

Apr 21, 2025

Begins

Apr 23, 2025

Discovered

May 26, 2026

Filed

vs. sector median

+48 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_dc7395101048ceb52026-05-27 · +1dVerified

Name: Pierson Ferdinand LLP
norm: pierson ferdinand
Domain: pierferd.com

Name: LEARN Regional Education Service Center
norm: learn regional education service center
Industry: Educationllm

Discovered: Apr 23, 2025
Breach occurred: Apr 21, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 13, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Worked with cybersecurity counsel and forensic experts to investigate
Implemented additional security measures to secure its environment
Notifying the affected individuals
Provided them with steps they can take to protect their personal information
Secured and remediated the compromise
Engaged additional third-party experts
Commenced an investigation
Hardened and enhanced our network security
Conducted a digital forensic investigation
Notified law enforcement as well as other appropriate parties and authorities
Providing you with access to free credit monitoring through Epiq Privacy Solutions ID
Providing you with proactive fraud assistance
Changes made: Enhancing our cyber preparedness through additional awareness training
Updating our procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(398 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMay 26 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/learn-regional-educational-service-center-20260526.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2026
Raw hash: a4592daed93bb8589a8577678c2ed3972f20a8915be5b412e7e699ad2d35ca18

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPierson Ferdinand LLP

Victim entityLEARN Regional Education Service Center

Incidentdiscovered Apr 23, 2025

Stated responseWorked with cybersecurity counsel and forensic experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov