HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Granite State Management & Resources

bd_b9b75f81b0aae71e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 22, 2022

Filed

Sep 12, 2022

To disclose

21 days

Affected

14state residents only

Confidence

65%

Full breach record for Granite State Management & Resources →5 incidents on file

Supplemental state-AG notice from Nelnet Servicing on behalf of Granite State Management & Resources regarding unauthorized access to student loan account registration data. Vulnerability exploited between June 1 and July 22, 2022. Affected 14 NH residents. Data included names, addresses, DOB, driver's license, and SSN. Nelnet secured systems, engaged forensic experts, notified DOE and law enforcement, and provided 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 82 days

discovery → filing · 21 days

Jun 1, 2022

Begins

Aug 22, 2022

Discovered

Sep 12, 2022

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed14 affectedView incident

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Granite State Management & Resources
norm: granite state management resources
Industry: Financial Servicesllm

Discovered: Aug 22, 2022
Breach occurred: Jun 1, 2022 – Jul 22, 2022
Undetected for: 82 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 7, 2022
Affected individuals: 14state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the U.S. Department of EducationNotified law enforcement
Initial access: exploit_public_facing

During the incident: Nelnet Servicing’s cybersecurity team took immediate action to secure the information system, block the suspicious activity, fix the issue, and launched an investigation with third-party forensic experts
Notified the U.S. Department of Education, which in turn notified law enforcement
Providing access to credit monitoring services for two (2) years, through Experian, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing individuals with information on how to obtain a free credit report
Encouragement to contact the Federal Trade Commission, their state Attorney General, and law enforcement
Changes made: Implementing additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nelnet-servicing-20220912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2022
Raw hash: ad223b6fe8b96dddc9e8bbde3497f5d7a006ebd0528ecc8ede0d1a7dc0c17dd7

Reporting entityMullen Coughlin LLC

Victim entityGranite State Management & Resources

Incidentdiscovered Aug 22, 2022

Stated responseNelnet Servicing’s cybersecurity team took immediate action to secure the information system, block the suspicious activity, fix the issue, and launched an investigation with third-party forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov