MalwareEducationEducationRansomwareData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Riverhead Central School District

bd_e0a932472bb3ecb1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 3, 2021

Filed

Mar 24, 2022

To disclose

16 weeks

Affected · nationwide

4226 in this filing

Linked

6 records

Confidence

66%

Full breach record for Riverhead Central School District →

Riverhead Central School District experienced a ransomware incident starting Nov 9, 2021, discovered Dec 3, 2021. Unauthorized access exposed PII of ~422 individuals (students/staff), including names, addresses, DOBs, and SSNs. 6 NH residents notified on Mar 22, 2022. DHS and FBI notified. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d16 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 24 days

discovery → filing · 16 weeks / 111 days

Nov 9, 2021

Begins

Dec 3, 2021

Discovered

Mar 24, 2022

Filed

This filing is one of 6 records about the same incident.View merged incident

A leak claim by lockbit2 about this victim was first seen 89 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit2bd_9ca96c21115b66062021-12-25 · +89dVerified by operator

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_9f3aac9faa2a339e2022-03-23 · +1dVerified by operator
Maine State AGbd_c0a2cd50bb9bb3ce2022-03-23 · +1dVerified
Indiana State AGbd_53c209c30674d5902022-03-22 · +2dVerified by operator
Montana State AGbd_839dca45a9638ee42022-03-22 · +2dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Riverhead Central School District
norm: riverhead central school district
Domain: riverhead.net
Industry: Educationllm

Discovered: Dec 3, 2021
Breach occurred: Nov 9, 2021
Undetected for: 24 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 22, 2022
Affected individuals: 422state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the New Hampshire Office of the Attorney GeneralNotified the Department of Homeland SecurityNotified the Federal Bureau of Investigation’s cybersecurity unit, IC3

During the incident: Worked with cybersecurity counsel and a cyber forensic specialist to investigate
Notified the Department of Homeland Security and the Federal Bureau of Investigation’s cybersecurity unit, IC3
Offered complimentary identity theft and credit monitoring services for twelve (12) months
Changes made: Taking steps to strengthen its security posture to prevent a similar event from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(111 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMar 22 · first

Montana State AGMar 22 · first

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/riverhead-central-school-district-20220324.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2022
Raw hash: 5a6cc7641ab41ad4fabe75ac947e02b536f185d2fa961b82a2a8086287881310

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityRiverhead Central School District

Incidentdiscovered Dec 3, 2021

Stated responseWorked with cybersecurity counsel and a cyber forensic specialist to investigate

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov