AccidentalEducationEducationMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDHighResolved

Broome Community College

bd_f50aa01afb25cbe5 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 21, 2009

Filed

Mar 12, 2009

To disclose

29 days

Affected · nationwide

13,62766 in this filing

Linked

2 filings

Confidence

65%

Full breach record for Broome Community College →

Broome Community College inadvertently included Social Security numbers on mailing address labels of its alumni magazine, BROOME, affecting 13,627 individuals (66 New Hampshire residents). The breach was discovered on February 11, 2009. The college engaged Kroll to provide free identity theft restoration and credit monitoring services for one year. This was an inadvertent disclosure error, not a hacking incident.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 50 days

Jan 21, 2009

Begins

Jan 21, 2009

Discovered

Mar 12, 2009

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_dc553bb5201fdfeb2009-03-16 · +4dVerified

Name: Broome Community College
norm: broome community college

Name: Broome Community College
norm: broome community college
Industry: Educationllm

Discovered: Jan 21, 2009
Breach occurred: Jan 21, 2009
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 14, 2009
Affected individuals: 13,627state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notified New Hampshire Office of the Attorney GeneralFiled with New York State pursuant to Information Security Breach and Notification Act

During the incident: Engaged Kroll, a New York-based risk consulting firm, to serve you
Providing you FREE access to Enhanced Identity Theft Restoration
Providing you FREE access to Continuous Credit Monitoring
Changes made: Steps have been taken to ensure that it will not happen again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 12 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/broome-community-college-20080312.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2009
Raw hash: eb049e62454866f41211c983ebf71ad9753457e79a6bc2f7d34e72f83d7826b1

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBroome Community College

Victim entityBroome Community College

Incidentdiscovered Jan 21, 2009

Stated responseEngaged Kroll, a New York-based risk consulting firm, to serve you

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov