MalwareEducationEducationRansomwareData EncryptedIdentity (basic)Government IDMediumContained

Lakeland Community College

bd_e6bb4b050f2798f4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 13, 2020

Filed

Apr 16, 2020

To disclose

13 weeks

Affected

4state residents only

Linked

5 filings

Confidence

67%

Full breach record for Lakeland Community College →2 incidents on file

Lakeland Community College notified the NH Attorney General of a ransomware incident detected on Jan 13, 2020. Files on network drives were encrypted. Forensic review on Mar 6, 2020, confirmed limited PII (names, SSNs) of ~4 NH residents was impacted. No evidence of misuse. Notifications sent Apr 3, 2020, with 1-year credit monitoring offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d13 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 13 weeks / 94 days

Jan 13, 2020

Discovered

Apr 16, 2020

Filed

vs. sector median

+5 wks slower

This filing is one of 5 about the same incident.View merged incident

A leak claim by maze about this victim predates this filing by 79 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemazebd_f4bf78d9f9cc6bba2020-01-28 · +79dVerified by operator

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_a30c64b910a2b4852020-04-13 · +3dVerified
Massachusetts State AGbd_06cf510da11d6dcb2020-04-21 · +5dVerified by operator
Indiana State AGbd_703b0e8e397d43e52020-04-03 · +13dVerified by operator

Name: Lakeland Community College
norm: lakeland community college
Domain: lakelandcc.edu

Name: Lakeland Community College
norm: lakeland community college
Domain: lakelandcc.edu
Industry: Educationllm

Discovered: Jan 13, 2020
Materiality determined: —
Notification sent: Apr 3, 2020
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Gordon MacDonald

During the incident: Contained the threat by disabling all unauthorized access to its network
Restored all encrypted data
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Extensive forensic investigation and manual document review
Provide the affected residents with written notification
Offer the affected residents complimentary one-year memberships with a credit monitoring service
Advise the affected residents about the process for placing fraud alerts and/or security freezes on their credit files and obtaining free credit reports
Provided with the contact information for the consumer reporting agencies and the Federal Trade Commission
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(94 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGApr 3 · first

Montana State AG+10d

New Hampshire State AG+13d · this page

Massachusetts State AG+18d

Pattern: first filing Apr 3 (IN), last Apr 21 (MA) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lakeland-community-college-20200416.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2020
Raw hash: 283fa977388913d5f04ef2cd106b954992b31dcba785f32165bf3d8f8e6d713b

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityLakeland Community College

Victim entityLakeland Community College

Incidentdiscovered Jan 13, 2020

Stated responseContained the threat by disabling all unauthorized access to its network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov