MalwarePIIIdentity (basic)LowContained

STRIDE, INC.

bd_ffe7a3018f9a03f8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 11, 2020

Filed

Jun 11, 2021

To disclose

30 weeks

Affected

34state residents only

Linked

9 filings

Confidence

65%

Full breach record for STRIDE, INC. →2 incidents on file

Stride Inc. notified individuals of a ransomware attack occurring between Nov 4-19, 2020. The attacker encrypted files and demanded ransom. Stride paid the ransom and engaged forensic investigators. Affected data included names. Stride offered 12 months of credit monitoring. The incident was contained, and Stride is enhancing security policies.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 30 weeks / 212 days

Nov 4, 2020

Begins

Nov 11, 2020

Discovered

Jun 11, 2021

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_2e01c9fd34f00d2a2021-06-11Verified
Maine State AGbd_4d30d9a2593863a12021-06-11Candidate
Massachusetts State AGbd_59ec8c2650ce194a2021-06-11Verified
New Hampshire State AGbd_ad9939063527aa5a2021-06-18 · +7dVerified

Show 4 more filings ↓up to 31d gap

Maine State AGbd_138e1dab0273cd232021-07-06 · +25dVerified
Oregon State AGbd_19dc41e91d1ea0b92021-07-06 · +25dVerified
California State AGbd_305cdfe9ea057df02021-07-06 · +25dVerified
New Hampshire State AGbd_334e4aad324d39722021-07-12 · +31dVerified

Name: STRIDE, INC.
norm: stride
Domain: stridelearning.com

Name: STRIDE, INC.
norm: stride
Domain: stridelearning.com

Discovered: Nov 11, 2020
Breach occurred: Nov 4, 2020 – Nov 19, 2020
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 11, 2021
Affected individuals: 34state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notified federal law enforcement authorities
Initial access: valid_credentials

During the incident: Quickly took steps to lock down impacted systems
Notified federal law enforcement authorities
Began working with an industry-leading third-party forensics team to investigate and assist with the incident
Initiated a comprehensive review, with the assistance of industry-leading forensic specialists, to identify any information of individuals contained in the files affected by the incident
Undertook a comprehensive internal effort to reconcile the results of the third-party review and find contact information for the affected individuals
Made a payment to the ransomware attacker
Engaged an industry-leading third-party specialist to conduct a search for the data on the Internet
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(212 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGJun 11 · first

Maine State AGJun 11 · first

Massachusetts State AGJun 11 · first

Montana State AGJun 11 · first · this page

New Hampshire State AG+7d

Maine State AG+25d

Oregon State AG+25d

California State AG+25d

New Hampshire State AG+31d

Pattern: first filing Jun 11 (IN), last Jul 12 (NH) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-8.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2021
Raw hash: a63d37890e061e0040162c658bcfac2cb1bdef1884c5036bad3d096904e51c9e

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entitySTRIDE, INC.

Victim entitySTRIDE, INC.

Incidentdiscovered Nov 11, 2020

Stated responseQuickly took steps to lock down impacted systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov