HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Assumption University

bd_c6ceb3f145eda0ee · schema v1 · pii pii-v1

Full breach record for Assumption University →

Assumption University notified New Hampshire residents on November 17, 2023, that unauthorized access to two employee email accounts occurred between March 4 and April 4, 2023. The breach potentially exposed names and government identifiers of 61 NH residents. The university engaged forensic specialists, notified law enforcement, and provided 24 months of credit monitoring.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_54ec799273bb9168Vermont State AGfiled 2023-11-17Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/assumption-university-20231117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 17, 2023
Raw hash: d9c3f954fd9888d8aa7bf2af8ebcef0e8c6b664ab6b9a12c2de7e9fe13fe39df

Reporting entity

Name: Assumption University
norm: assumption university
Domain: assumption.edu

Victim entity

Name: Assumption University
norm: assumption university
Domain: assumption.edu

Incident

Discovered: Apr 4, 2023
Materiality determined: —
Notification sent: Nov 17, 2023
Affected individuals: 61
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: notified law enforcement regarding the eventproviding written notice of this incident to relevant regulators
Initial access: valid_credentials

Compliance

Time to disclose: 32 weeks(227 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.