HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

National Education Association

bd_f8b52751af2b838d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 1, 2020

Filed

Oct 19, 2020

To disclose

18 days

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for National Education Association →4 incidents on file

On October 1, 2020, the National Education Association (NEA) detected unauthorized access to a consultant's email account. The account contained documents with full names and Social Security numbers of individuals, including one New Hampshire resident. NEA blocked the account, engaged forensics experts, and confirmed the data was potentially accessible. Notices were mailed to the affected resident on October 16, 2020, and 18 months of identity monitoring were provided.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Oct 1, 2020

Begins

Oct 1, 2020

Discovered

Oct 19, 2020

Filed

vs. sector median

16 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_58e493e9fdba0b7c2020-10-19Verified
Montana State AGbd_27c0fed81501413d2020-10-16 · +3dCandidate

Name: National Education Association
norm: national education
Domain: nea.org

Name: National Education Association
norm: national education
Domain: nea.org
Industry: Professional Servicesllm

Discovered: Oct 1, 2020
Breach occurred: Oct 1, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 16, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General Gordon MacDonald, Consumer Protection Bureau, Office of the Attorney General, New Hampshire

During the incident: Blocked further access to the affected account
Conducted an investigation to determine the reason for the suspicious activity
Engaged forensics experts
Performed a comprehensive review of the affected e-mail account
Mailed notice to the affected New Hampshire resident
Provided relevant regulatory notices
Changes made: Confirm and strengthen the security of our systems
Secured the services of CyberScout to provide identity monitoring services at no cost for 18 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGOct 16 · first

Maine State AG+3d

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/national-education-association-20201019.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 19, 2020
Raw hash: 59c710dbbf21077fb546b6b4e9c5f935a2612d93623e4fee467a0ae109724833

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNational Education Association

Victim entityNational Education Association

Incidentdiscovered Oct 1, 2020

Stated responseBlocked further access to the affected account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov