HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Kentucky Wesleyan College
bd_0c98d6e8423bd90e · schema v1 · pii pii-v1
Full breach record for Kentucky Wesleyan College →Kentucky Wesleyan College experienced an external system breach (hacking) on September 22, 2020. The incident compromised the personal information of 31,796 individuals, including Social Security Numbers. The breach was discovered on the same date. Kentucky Wesleyan College notified affected individuals in writing on or about March 22, 2021, and provided 24 months of complimentary credit monitoring and identity theft insurance through Cyberscout. Six Maine residents were among those affected.
Maine clockDiscovered Sep 22, 2020 → Filed with AG Mar 18, 2021177d ✗ ME AG >90d25 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0e42eb75b707279aMontana State AGfiled 2021-03-22(4d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bf3134d8-1282-460e-8dd4-ca3f8ca26d7c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2021
- Raw hash
- 6e087df10c016fdfe8d3f5ec77a2182d099d1854447372c5cd9d6082ea8e14a4
Reporting entity
- Name
- Kentucky Wesleyan Collegenorm: kentucky wesleyan college
- Industry
- education
Victim entity
- Name
- Kentucky Wesleyan Collegenorm: kentucky wesleyan college
- Industry
- education
Incident
- Discovered
- Sep 22, 2020
- Materiality determined
- —
- Notification sent
- Mar 22, 2021
- Affected individuals
- 31,796
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 weeks(177 days from discovery to filing)
- Compliance flags
- ME AG >90d · 177dME resident >180d · 181d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 22, 2020→ Filed with AG: Mar 18, 2021177d 90 days ME AG >90d Maine Discovered: Sep 22, 2020→ Notified: Mar 22, 2021181d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.