PhysicalEducationEducationTheftOpportunisticIdentity (basic)Government IDEducationMediumContained

Methodist Theological School in Ohio

bd_f91fe94a9f3755a7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 15, 2010

Filed

Nov 10, 2010

To disclose

26 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Methodist Theological School in Ohio →2 incidents on file

Methodist Theological School in Ohio reported the theft of a staff member's laptop on October 13, 2010, containing PII including SSNs, names, addresses, and grades. The school discovered the theft on October 15, 2010, notified law enforcement, and began mailing notices and offering credit monitoring on November 11, 2010. One New Hampshire resident was affected.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 26 days

Oct 13, 2010

Begins

Oct 15, 2010

Discovered

Nov 10, 2010

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_5c60b253b310b6962010-11-15 · +5dVerified

Name: Methodist Theological School in Ohio
norm: methodist theological school in ohio
Domain: mtso.edu

Name: Methodist Theological School in Ohio
norm: methodist theological school in ohio
Domain: mtso.edu
Industry: Educationllm

Discovered: Oct 15, 2010
Breach occurred: Oct 13, 2010
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 11, 2010
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEducation
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified the Family Policy Compliance Office at the U.S. Department of Education

During the incident: Contacted law enforcement officials in an attempt to recover the laptop
Engaged in a comprehensive investigation and analysis
Conducted an internal investigation
Conducted numerous interviews of the MTSO personnel most familiar with the details of the information on the laptop
Notify all affected individuals via written letter to each through first class mail
Offer them the Opportunity to enrol! in a free credit monitoring service for one year
Changes made: Trained employees not to respond to outside requests for non-directory information about students
Working to strengthen its practices for safeguarding sensitive data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGNov 10 · first · this page

Massachusetts State AG+5d

Pattern: first filing Nov 10 (NH), last Nov 15 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/methodist-theological-20101110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2010
Raw hash: 71886ed4002932798e59b8607a781579b6fafe7700be3323827364dfdfd75785

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMethodist Theological School in Ohio

Victim entityMethodist Theological School in Ohio

Incidentdiscovered Oct 15, 2010

Stated responseContacted law enforcement officials in an attempt to recover the laptop

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov