HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Financial accountLowContained

Homeschool Legal Defense Association

bd_e22ee248b17509c9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 2, 2022

Filed

Feb 1, 2023

To disclose

52 weeks

Affected

8state residents only

Linked

3 filings

Confidence

67%

Full breach record for Homeschool Legal Defense Association →2 incidents on file

Homeschool Legal Defense Association (HSLDA) notified the NH AG of a data security incident involving its payroll management system. An unauthorized party accessed the system using compromised credentials on February 2, 2022. HSLDA engaged forensic experts, reset passwords, and notified affected individuals. 8 NH residents were impacted. Remediation included strengthened password policies and credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 52 weeks / 364 days

Feb 2, 2022

Discovered

Feb 1, 2023

Filed

vs. sector median

+33 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_3a799b687c7d12a72023-01-30 · +2dCandidate
Maine State AGbd_53cf643f56b5efb32023-01-30 · +2dCandidate

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Homeschool Legal Defense Association
norm: homeschool legal defense
Industry: Professional Servicesllm

Discovered: Feb 2, 2022
Materiality determined: —
Notification sent: Jan 19, 2023
Affected individuals: 8state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Shutting down access to the payroll system
Changing passwords
Engaging third party experts to assist in remediation steps
Commenced an investigation to determine the nature and scope of the incident
Engaged a third-party data mining vendor to conduct a further review
Provided notice to all employees
Provided a second round of notice to the additional individuals
Changes made: Strengthened internal password policy by increasing complexity
Enhanced secure login authentication procedures for third party service provider accounts
Provided twelve (12) months of unlimited access to their Equifax credit report and credit score
Provided a daily credit monitoring service
Provided access to an identity restoration program
Provided up to $1,000,000 in identity theft insurance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 52 weeks(364 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGJan 30 · first

Maine State AGJan 30 · first

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/homeschool-legal-defense-association-20230201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 1, 2023
Raw hash: b49212385ddbcc80b2fd139409fb4edeed59da579a01e91ab0795f54f723c1d0

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityHomeschool Legal Defense Association

Incidentdiscovered Feb 2, 2022

Stated responseShutting down access to the payroll system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov