AccidentalEducationEducationMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDHighResolved

Broome Community College

bd_f50aa01afb25cbe5 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 21, 2009

Filed

Mar 12, 2009

To disclose

29 days

Affected

13,627

Confidence

65%

Full breach record for Broome Community College →

Broome Community College inadvertently included Social Security numbers on mailing address labels of its alumni magazine, BROOME, affecting 13,627 individuals (66 New Hampshire residents). The breach was discovered on February 11, 2009. The college engaged Kroll to provide free identity theft restoration and credit monitoring services for one year. This was an inadvertent disclosure error, not a hacking incident.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 50 days

Jan 21, 2009

Begins

Jan 21, 2009

Discovered

Mar 12, 2009

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13,627 affectedView incident

Name: Broome County Attorney's Office
norm: broome county attorney s office

Name: Broome Community College
norm: broome community college
Industry: Educationllm

Discovered: Jan 21, 2009
Breach occurred: Jan 21, 2009
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 14, 2009
Affected individuals: 13,627state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unknown
Regulator citations: Notified New Hampshire Office of the Attorney GeneralFiled with New York State pursuant to Information Security Breach and Notification Act

During the incident: Engaged Kroll, a New York-based risk consulting firm, to serve you
Providing you FREE access to Enhanced Identity Theft Restoration
Providing you FREE access to Continuous Credit Monitoring
Changes made: Steps have been taken to ensure that it will not happen again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/broome-community-college-20080312.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2009
Raw hash: eb049e62454866f41211c983ebf71ad9753457e79a6bc2f7d34e72f83d7826b1

Reporting entityBroome County Attorney's Office

Victim entityBroome Community College

Incidentdiscovered Jan 21, 2009

Stated responseEngaged Kroll, a New York-based risk consulting firm, to serve you

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov