HackingEducationEducationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

CHAPMAN UNIVERSITY

bd_bc2062973f1c1fa3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 16, 2011

Filed

Feb 22, 2011

To disclose

6 days

Affected

15state residents only

Linked

2 filings

Confidence

66%

Full breach record for CHAPMAN UNIVERSITY →5 incidents on file

Chapman University notified the NH Attorney General of a breach affecting 15 NH residents. On Feb 15, 2011, an authenticated user accessed a document containing names, SSNs, student IDs, and financial aid info. Access was blocked immediately. Notifications mailed Feb 22, 2011, with 1-year credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 6 days

Feb 15, 2011

Begins

Feb 16, 2011

Discovered

Feb 22, 2011

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_64fe40f686f5f50b2011-02-24 · +2dVerified

Name: CHAPMAN UNIVERSITY
norm: chapman university

Name: CHAPMAN UNIVERSITY
norm: chapman university
Industry: Educationllm

Discovered: Feb 16, 2011
Breach occurred: Feb 15, 2011
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Feb 22, 2011
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Legal Notice of Information Security Breach filed with Office of the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Blocked further unauthorized access to it
Corrected access privileges to the document within minutes of receiving notice
Notifying all affected individuals via written letter to each through first class mail
Offering them the opportunity to enroll in a free credit monitoring service for one year
Changes made: Enhance its security-protocol training
Implement additional software-related safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGFeb 22 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chapman-university-20110222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2011
Raw hash: 31ec90bbed75ada66af90b71fb6e07c62f43c6726bed1d38d775083d661d2899

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCHAPMAN UNIVERSITY

Victim entityCHAPMAN UNIVERSITY

Incidentdiscovered Feb 16, 2011

Stated responseBlocked further unauthorized access to it

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov