MalwareEducationEducationRansomwareSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountFinancial credentialsLowResolved

Colgate University

bd_d583a77ce59bbf1c · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 27, 2019

Filed

Apr 10, 2019

To disclose

6 weeks

Affected

7state residents only

Linked

3 filings

Confidence

65%

Full breach record for Colgate University →2 incidents on file

Colgate University notified the NH AG of a breach at third-party bookstore host PrismRBS. Malicious software captured payment card data (names, numbers, CVVs) for 7 NH residents between Jan 19-26, 2019. Incident discovered Feb 27, 2019. Malware removed, additional security measures implemented, and identity protection services offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 39 days

discovery → filing · 6 weeks / 42 days

Jan 19, 2019

Begins

Feb 27, 2019

Discovered

Apr 10, 2019

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Part of PrismRBS supply-chain incident (2019) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_54f13adb7fdfbcbe2019-04-10Verified
Montana State AGbd_d2394d8364fbff672019-04-11 · +1dCandidate

Name: Colgate University
norm: colgate university
Domain: colgate.edu

Name: Colgate University
norm: colgate university
Domain: colgate.edu
Industry: Educationllm

Discovered: Feb 27, 2019
Breach occurred: Jan 19, 2019 – Jan 26, 2019
Undetected for: 39 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 10, 2019
Affected individuals: 7state-resident count only
Data types: Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General pursuant to N.H. Rev. Stat. §359-C:19
Third party: via PrismRBS
Initial access: external_remote_services

During the incident: PrismRBS hired an expert outside PCI Forensics Investigator to respond to the incident
PrismRBS removed the malicious software
PrismRBS implemented several additional security measures
Colgate notified its credit card payment processor of the incident
Colgate placed notification letters in the U.S. Mail to affected individuals
PrismRBS is offering one year of identity protection services through IdentityWorks
Changes made: PrismRBS implemented several additional security measures to help prevent this type of incident from reoccurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGApr 10 · first

New Hampshire State AGApr 10 · first · this page

Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/colgate-university-20190410.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2019
Raw hash: 7c40cdfcb4ba0fe767e1cd63a1617b07ae4c96e228ac859165b0dea89074f0c0

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityColgate University

Victim entityColgate University

Incidentdiscovered Feb 27, 2019

Stated responsePrismRBS hired an expert outside PCI Forensics Investigator to respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov