AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Student Loan Xpress, Inc.

bd_f1f92da7162de643 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 29, 2009

To disclose

—

Affected

49state residents only

Linked

2 filings

Confidence

68%

Full breach record for Student Loan Xpress, Inc. →

Student Loan Xpress, Inc. notified the New Hampshire Attorney General on January 29, 2009, regarding a data security incident involving approximately 49 NH residents. The loan servicer, American Education Services (AES), inadvertently transmitted personal information (names, SSNs, DOBs, loan data) to another lender. No unauthorized use was detected. Affected individuals received notices on January 30, 2009, offering one year of free Equifax Credit Watch Gold monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jan 29, 2009

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_933f8bd72bb0e3b12009-02-02 · +4dVerified

Name: Student Loan Xpress, Inc.
norm: student loan xpress

Name: Student Loan Xpress, Inc.
norm: student loan xpress
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jan 30, 2009
Affected individuals: 49state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1119 Automated Collection
Threat actor: Partner
Regulator citations: Provided written notification to New Hampshire Attorney General Kelly A. Ayette
Third party: via American Education Services

During the incident: Working with AES to take steps to help ensure that this type of incident does not happen in the future
Sent notice to affected individuals
Arranged for free Equifax Credit Watch Gold membership (1 year)
Provided Reference Guide on identity theft protection
Changes made: Working with AES to take steps to help ensure that this type of incident does not happen in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJan 29 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/student-loan-xpress-20090129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 29, 2009
Raw hash: 8e4d64c7a09f36c59dbd378b8c3529c6f73efaa35e5d6d4b50b3b7147d937f67

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityStudent Loan Xpress, Inc.

Victim entityStudent Loan Xpress, Inc.

IncidentThird-Party / Supply Chain

Stated responseWorking with AES to take steps to help ensure that this type of incident does not happen in the future

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov