MalwareEducationEducationRansomwareData EncryptedIdentity (basic)Government IDFinancial accountMediumContained

University of New Hampshire [UNH]

bd_ca9060c5db58bf99 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 20, 2011

Filed

Nov 30, 2011

To disclose

6 weeks

Affected

2scope not determined

Confidence

67%

Full breach record for University of New Hampshire [UNH] →4 incidents on file

University of New Hampshire notified NH AG of a security incident where malware on an employee computer potentially exposed alumni PII (SSN, credit card info). Two individuals affected. Notification sent Nov 18, 2011. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 41 days

Oct 20, 2011

Discovered

Nov 30, 2011

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: University of New Hampshire [UNH]
norm: university of new hampshire unh
Domain: unh.edu

Name: University of New Hampshire [UNH]
norm: university of new hampshire unh
Domain: unh.edu
Industry: Educationllm

Discovered: Oct 20, 2011
Materiality determined: —
Notification sent: Nov 18, 2011
Affected individuals: 2scope not determined
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified Attorney General Michael Delany

During the incident: Removed the files from the hard drive of the compromised computer
Fully removed the virus from the computer
Working with our IT department to minimize the risk of possible future incidents
Arranged for a credit monitoring service to assist you with monitoring your accounts for the next two years
Partnered with ProtectMyID from Experian to provide you with two full years of credit monitoring
Changes made: Offering two years of credit monitoring service through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/university-nh-20111130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2011
Raw hash: 1d3a43d84fd98bc1e5254b18cf471b88c901513b5ffcce2b7888ca8e63c1def7

Reporting entityUniversity of New Hampshire [UNH]

Victim entityUniversity of New Hampshire [UNH]

Incidentdiscovered Oct 20, 2011

Stated responseRemoved the files from the hard drive of the compromised computer

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov