MalwareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
Charles Stewart Mott Community College
bd_06a8ca3da449de54 · schema v1 · pii pii-v1
Full breach record for Charles Stewart Mott Community College →Charles Stewart Mott Community College experienced a ransomware incident between November 27, 2020, and January 9, 2021. The breach, discovered on April 1, 2021, affected 60,383 individuals. The compromised data included financial account numbers or credit/debit card numbers combined with security codes, access codes, passwords, or PINs. The college provided one year of credit monitoring and identity theft protection services through Experian to those affected.
Maine clockDiscovered Apr 1, 2021 → Filed with AG Apr 1, 20210d ✓ ME AG ≤30d≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a4010fb161df77a8Montana State AGfiled 2021-04-01Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f567b1c7-664f-415b-ac2e-46dc8695a2e4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2021
- Raw hash
- 6ae547c242142e53eab6496559bd4cdc3bba3a83af779e721efdac1d27c5c5c4
Reporting entity
- Name
- Charles Stewart Mott Community Collegenorm: charles stewart mott community college
Victim entity
- Name
- Charles Stewart Mott Community Collegenorm: charles stewart mott community college
Incident
- Discovered
- Apr 1, 2021
- Materiality determined
- —
- Notification sent
- Apr 1, 2021
- Affected individuals
- 60,383
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 1, 2021→ Filed with AG: Apr 1, 20210d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.