HackingEducationEducationStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Stanly Community College

bd_d0555e07284ffd6e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 13, 2022

Filed

May 31, 2023

To disclose

46 weeks

Affected

1state residents only

Linked

5 filings

Confidence

65%

Full breach record for Stanly Community College →

Stanly Community College notified NH AG of a cyberattack impacting employee email accounts. Unauthorized access occurred between July 2021 and Sept 2021. One NH resident's PII was accessed. College engaged third-party experts, reset passwords, enabled MFA, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 349 days

discovery → filing · 46 weeks / 322 days

Jul 29, 2021

Begins

Jul 13, 2022

Discovered

May 31, 2023

Filed

vs. sector median

+39 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_c5a00e96c0cf52602023-05-31Verified
Vermont State AGbd_33945b1bdde3b3af2023-05-24 · +7dVerified
Indiana State AGbd_40d6ba47bff3d20a2023-05-24 · +7dVerified
Maine State AGbd_c591da7f1fd930a72023-05-24 · +7dCandidate

Name: Jackson Lewis
norm: jackson lewis
Domain: jacksonlewis.com

Name: Stanly Community College
norm: stanly community college
Industry: Educationllm

Discovered: Jul 13, 2022
Breach occurred: Jul 29, 2021 – Sep 9, 2021
Undetected for: 349 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 24, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Office of the Attorney General, New Hampshire
Initial access: valid_credentials

During the incident: Commenced an investigation of the Incident, with assistance from third party experts
Reset all email passwords
Enabled multifactor authentication for all users
Upgraded the security of its email platform
Implemented continuous logging
Changes made: Reviewing and updating its existing data security policies and procedures
Offering identify theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 46 weeks(322 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGMay 24 · first

Indiana State AGMay 24 · first

Maine State AGMay 24 · first

Massachusetts State AG+7d

New Hampshire State AG+7d · this page

Pattern: first filing May 24 (VT), last May 31 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/stanly-community-college-20230531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 31, 2023
Raw hash: 801aaa7591accce0e7142628668f4bcb671f494f5e04afa123894b195b77a02e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityJackson Lewis

Victim entityStanly Community College

Incidentdiscovered Jul 13, 2022

Stated responseCommenced an investigation of the Incident, with assistance from third party experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov