HackingEducationEducationStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Hope College

bd_0cdafc6482d5ed3e · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 27, 2022

Filed

Dec 16, 2022

To disclose

11 weeks

Affected

149state residents only

Linked

8 filings

Confidence

64%

Full breach record for Hope College →

Hope College notified affected individuals of a data security incident discovered on September 27, 2022, involving potential unauthorized access to network data. The incident may have exposed names and other personal information. The college engaged forensic specialists and is offering complimentary credit monitoring services to impacted individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 80 days

Sep 27, 2022

Discovered

Dec 16, 2022

Filed

vs. sector median

+3 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Washington State AGbd_18a48ef8b07b3fde2022-12-16Verified
Massachusetts State AGbd_2a87d3260ac8c89f2022-12-16Verified
Oregon State AGbd_3305749a10bce03d2022-12-16Verified
California State AGbd_c4c2bd429737b0182022-12-16Verified

Show 3 more filings ↓up to 4d gap

Maine State AGbd_eb82ec013c31afe82022-12-16Verified
Indiana State AGbd_8233c349a01e818d2022-12-15 · +1dCandidate
New Hampshire State AGbd_b1ee9d301c16a9352022-12-20 · +4dVerified

Name: Hope College
norm: hope college
Domain: hope.edu

Name: Hope College
norm: hope college
Domain: hope.edu
Industry: Educationllm

Discovered: Sep 27, 2022
Materiality determined: —
Notification sent: Dec 15, 2022
Affected individuals: 149state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party computer specialists to conduct a full forensic investigation
Arranged the ability to activate, at no cost to you, an online credit monitoring service for <<Servicelength>> months provided by Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(80 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Indiana State AGDec 15 · first

Washington State AG+1d

Massachusetts State AG+1d

Oregon State AG+1d

California State AG+1d

Maine State AG+1d

Montana State AG+1d · this page

New Hampshire State AG+5d

Pattern: first filing Dec 15 (IN), last Dec 20 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-8.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 16, 2022
Raw hash: 6862f3185e6e0e8a85aa8bac4e720b7ae4efedfe60217ad2600d37d8d440e87a

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityHope College

Victim entityHope College

Incidentdiscovered Sep 27, 2022

Stated responseEngaged third-party computer specialists to conduct a full forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov