HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLowContained
National Math and Science Initiative
bd_b37c007a97ec7ad9 · schema v1 · pii pii-v1
Full breach record for National Math and Science Initiative →National Math and Science Initiative (NMSI) disclosed a cybersecurity incident affecting individuals across multiple states, including California, New York, and Rhode Island. NMSI discovered unusual network activity on October 13, 2021, and determined that between September 23 and October 18, 2021, an unauthorized actor accessed systems containing personal information, including names and Social Security Numbers. NMSI reset passwords, notified law enforcement, and offered credit monitoring services. The breach was determined to be material on January 6, 2022.
California clockDiscovered Oct 13, 2021 → Notified Jan 6, 202285d ✗ CA 60-day late17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by conti about this victim predates this filing by 109 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4182a4dc5d0f9b68Maine State AGfiled 2022-02-07Candidate
- bd_dbb3d06883de0bf3Montana State AGfiled 2022-02-07Verified
- bd_3db1dbaf5f5f93c8South Carolina State AGfiled 2022-02-08(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550761
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2022
- Raw hash
- b2e1dec40160f1a2b3fb1680c8b4daa44a77f5a541c6b1329797e493657ac70a
Reporting entity
- Name
- National Math and Science Initiativenorm: national math and science initiative
- Domain
- nms.org
Victim entity
- Name
- National Math and Science Initiativenorm: national math and science initiative
- Domain
- nms.org
Incident
- Discovered
- Oct 13, 2021
- Materiality determined
- Jan 6, 2022
- Notification sent
- Jan 6, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(117 days from discovery to filing)
- Compliance flags
- CA 60-day late · 85dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 13, 2021→ Notified: Jan 6, 202285d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.