DisclosureLens
HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsMedium

Newcourse Communications

bd_f58e0ec051bd1f8b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 15, 2023

Filed

Mar 14, 2023

To disclose

27 days

Affected · nationwide

8,3731 in this filing

Linked

3 filings

Confidence

65%
Full breach record for Newcourse Communications →2 incidents on file

Newcourse Communications reported an external system breach that occurred between April 27, 2022, and May 3, 2022. The incident was discovered on February 15, 2023. The breach compromised the names and financial account numbers or credit/debit card numbers (with security codes) of 8,373 individuals. The company began notifying affected individuals on March 10, 2023, and offered 12 months of complimentary credit monitoring services through IDX.

Maine clockDiscovered Feb 15, 2023 → Filed with AG Mar 14, 202327d ✓ ME AG ≤30d27 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 294 days
discovery → filing · 27 days

Apr 27, 2022

Begins

Feb 15, 2023

Discovered

Mar 14, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Montana State AGMar 9 · first
Massachusetts State AG+5d
Maine State AG+5d · this page

Pattern: first filing Mar 9 (MT), last Mar 14 (ME) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.