HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEDUCATIONFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Connecticut College
bd_0013433ecc3d8912 · schema v1 · pii pii-v1
Full breach record for Connecticut College →Connecticut College notified consumers of a data security incident where an unauthorized party accessed files containing names, SSNs, and potentially education, financial, and health records. The incident was detected on March 3, 2023, and contained. Forensic investigation confirmed data exposure in January 2024. The college offered 24 months of credit monitoring.
Vermont clock✗ VT AG >45 bday49 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_440a249b2323b0c0Indiana State AGfiled 2024-02-07Verified
- bd_4ab94e513c0ebf6dMontana State AGfiled 2024-02-07Candidate
- bd_96ece187cc7fdefaMaine State AGfiled 2024-02-07Verified
- bd_add1502cea9bc4e5California State AGfiled 2024-02-08(1d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-02-07-connecticut-college-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2024
- Raw hash
- d29ce4261c5f504d0fc75dbea937adc499a8eeedbc6aeb8ec79a9c2a6e0dfd05
Reporting entity
- Name
- Connecticut Collegenorm: connecticut college
Victim entity
- Name
- Connecticut Collegenorm: connecticut college
Incident
- Discovered
- Mar 3, 2023
- Materiality determined
- —
- Notification sent
- Feb 7, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEDUCATIONFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 49 weeks(341 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.