MalwareEducationPIIIdentity (basic)Government IDMediumContained

Community School of Naples

bd_ff250de704564b90 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 18, 2023

Filed

Aug 30, 2023

To disclose

15 weeks

Affected

1state residents only

Linked

3 filings

Confidence

68%

Full breach record for Community School of Naples →2 incidents on file

Community School of Naples notified the NH Attorney General of a ransomware attack detected on May 18, 2023. An unauthorized third party accessed systems, potentially compromising student data. Forensic investigation confirmed unauthorized access to files containing student data. One New Hampshire resident was identified as potentially affected. The school engaged forensic specialists and offered free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 104 days

May 18, 2023

Discovered

Aug 30, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_da90d8daf349adc62023-08-30Candidate
Indiana State AGbd_518966cfff36e2932023-08-28 · +2dVerified

Name: Community School of Naples
norm: community school of naples

Name: Community School of Naples
norm: community school of naples

Discovered: May 18, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Engaged third-party forensic specialists to assist with securing the network environment and investigating the extent of any unauthorized activity
Offered free credit monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(104 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGAug 28 · first

Maine State AG+2d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/community-school-naples-20230830.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2023
Raw hash: 9a01d38beb752c1845f56ceba2929c60cdc565b4cec9cbea4db7e38e4a48bb30

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCommunity School of Naples

Victim entityCommunity School of Naples

Incidentdiscovered May 18, 2023

Stated responseEngaged third-party forensic specialists to assist with securing the network environment and investigating the extent of any unauthorized activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov