HackingEducationEducationStolen CredentialsCapture App DataDelayed DiscoveryCustomer Data InvolvedPIILowContained
National University of Natural Medicine
bd_1b06caf98ea5bd8f · schema v1 · pii pii-v1
Full breach record for National University of Natural Medicine →National University of Natural Medicine (NUNM) reported an unauthorized individual gained access to one employee email account between July 22 and July 29, 2025. The breach was discovered on November 7, 2025 after investigation by external cybersecurity professionals. Personal information contained in the emails may have been accessed. Fifteen Maine residents were affected. NUNM notified affected individuals on November 26, 2025, and offered 12 months of Kroll identity monitoring services.
Maine clockDiscovered Nov 7, 2025 → Filed with AG Nov 26, 202519d ✓ ME AG ≤30d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0d18555132480751Indiana State AGfiled 2025-11-26Verified
- bd_99008cb8d07aec6bVermont State AGfiled 2025-11-26Verified
- bd_b2a8e852202dea7dOregon State AGfiled 2025-11-26Verified
- bd_bb50dd7193281f83Montana State AGfiled 2025-11-26Verified
Show 1 more filing ↓Show fewer ↑up to 5d gap
- bd_1bd53a3a48ee1fcfNew Hampshire State AGfiled 2025-12-01(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/625374b9-b3c8-4e92-8486-911d12c00873.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 26, 2025
- Raw hash
- 37318d0769c8cdfd3fb4afb5461f15f7c508714d9d820f3b284e264c33f492aa
Reporting entity
- Name
- National University of Natural Medicinenorm: national university of natural medicine
- Industry
- Education
Victim entity
- Name
- National University of Natural Medicinenorm: national university of natural medicine
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Nov 7, 2025
- Materiality determined
- —
- Notification sent
- Nov 26, 2025
- Affected individuals
- 15
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notification filed with Maine Attorney General
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 19d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 7, 2025→ Filed with AG: Nov 26, 202519d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.