HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Paul Smith’s College
bd_1975423568504eb4 · schema v1 · pii pii-v1
Full breach record for Paul Smith’s College →Paul Smith's College reported an internal system breach that occurred between July 1, 2022, and August 31, 2022, and was discovered on January 26, 2023. The breach affected 10,615 individuals, compromising their names and Social Security numbers. The college began notifying affected individuals on February 17, 2023, and offered 12 months of identity protection services through Experian.
Leak gap clock⏱ Leak >30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by avoslocker about this victim predates this filing by 52 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_9ecc4e3f224e37bcLeak Siteavoslockerfiled 2022-12-26(52d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_93340885d0e3fae7Montana State AGfiled 2023-02-16Verified by operator
- bd_278f4e894c372785Vermont State AGfiled 2023-02-17(1d gap)Verified
- bd_749a2116957e8916Montana State AGfiled 2023-04-17(60d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/eca32f8f-7a9c-42cd-bcd8-cd5a83369f71.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 16, 2023
- Raw hash
- 9833f93223b7a2e1c4c214907c642e5ebedc62a1c74c3ab7224fe56f784fdedb
Reporting entity
- Name
- Paul Smith’s Collegenorm: paul smith s college
Victim entity
- Name
- Paul Smith’s Collegenorm: paul smith s college
Incident
- Discovered
- Jan 26, 2023
- Materiality determined
- —
- Notification sent
- Feb 17, 2023
- Affected individuals
- 10,615
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 26, 2023→ Filed with AG: Feb 16, 202321d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.