AccidentalEducationEducationMisdeliveryCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)MediumResolved

Saint Anselm College

bd_bf677fdc8579bf9f · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 26, 2010

Filed

May 28, 2010

To disclose

2 days

Affected

122state residents only

Linked

2 filings

Confidence

66%

Full breach record for Saint Anselm College →2 incidents on file

Saint Anselm College notified the NH Attorney General of an inadvertent disclosure of Social Security Numbers printed on coded alumni magazine address labels. Approximately 122 NH residents were affected. The College purged the data, destroyed the list, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 2 days

May 24, 2010

Begins

May 26, 2010

Discovered

May 28, 2010

Filed

vs. sector median

7 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e17326b7e7f63bdb2010-06-01 · +4dVerified

Name: Saint Anselm College
norm: saint anselm college

Name: Saint Anselm College
norm: saint anselm college
Industry: Educationllm

Discovered: May 26, 2010
Breach occurred: May 24, 2010
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 28, 2010
Affected individuals: 122state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1567 Deception: Spearphishing LinkT1074 Data Staged
Regulator citations: Notified New Hampshire Attorney General Michael A. Delaney

During the incident: Notified all individuals it believes may have had their social security numbers printed on labels
Purged the social security number information from the database
Destroyed the mailing list used in this instance
Resend the magazine to affected individuals with corrected address label
Offer full year of credit monitoring through LifeLock
Changes made: Purged social security numbers from the database
Destroyed the mailing list
Corrected the label template to exclude the ID/social security field
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 2 days(2 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMay 28 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/st-anselm-college-20100528.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2010
Raw hash: e818b5f16a7a3913dc73367bdf693214a586a6803d3fd3ddc17804933e199a8e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySaint Anselm College

Victim entitySaint Anselm College

Incidentdiscovered May 26, 2010

Stated responseNotified all individuals it believes may have had their social security numbers printed on labels

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov