MalwareEducationEducationRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

River City Education Resources

bd_d4850cb5350ca4dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 10, 2022

Filed

Feb 13, 2023

To disclose

14 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for River City Education Resources →

River City Education Services, Inc. experienced a ransomware attack on November 10, 2022. The incident potentially exposed personal information of current and former employees, including names, mailing addresses, dates of birth, and social security numbers. The company secured its network, engaged forensic investigators, and is offering 12 months of credit monitoring to affected individuals. No evidence of identity theft has been reported.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 95 days

Nov 10, 2022

Begins

Nov 10, 2022

Discovered

Feb 13, 2023

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: River City Education Resources
norm: river city education resources
Domain: rivercityeducationresources.com

Name: River City Education Resources
norm: river city education resources
Domain: rivercityeducationresources.com
Industry: Educationllm

Discovered: Nov 10, 2022
Breach occurred: Nov 10, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Secured our network environment
Launched a thorough investigation
Engaged independent IT security and forensic investigators
Working with law enforcement to help respond to this incident
Working with cybersecurity experts to review all policies and procedures relating to data management
Changes made: Implementing additional safeguards and enhanced security measures to better protect the privacy and security of information in its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(95 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/river-city-education-services-20230213.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 13, 2023
Raw hash: 92f9c20e7547632164f753ae9ad2100834325903f084e71e47876634410174d5

Reporting entityRiver City Education Resources

Victim entityRiver City Education Resources

Incidentdiscovered Nov 10, 2022

Stated responseSecured our network environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov