HackingEducationEducationIdentity (basic)Government IDHighContained

Whitworth University

bd_1b5f2a226647531b · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 29, 2022

Filed

May 13, 2023

To disclose

41 weeks

Affected · nationwide

65,59323 in this filing

Linked

11 records

Confidence

50%

Full breach record for Whitworth University →

On July 29, 2022, Whitworth University discovered that an unauthorized party had gained access to its systems, resulting in the compromise of names and Social Security numbers. The university notified the 23 affected Maine residents on April 28, 2023, and offered them 12 months of identity theft protection services through IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d41 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 41 weeks / 288 days

Jul 29, 2022

Begins

Jul 29, 2022

Discovered

May 13, 2023

Filed

This filing is one of 11 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 276 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_88fe38d865e0c77d2022-08-10 · +275dCandidate

Regulatory filings (9) · sorted by filing gap

California State AGbd_000f0e63ede62e352023-05-13Verified by operator
Oregon State AGbd_513ded4de33ab4772023-05-13Verified by operator
Massachusetts State AGbd_703a926d3e579ba32023-05-13Verified by operator
Montana State AGbd_a95dbb769635964d2023-05-12 · +1dVerified

Show 5 more filings ↓up to 221d gap

New Hampshire State AGbd_e0cb1c9df0d3debc2023-05-12 · +1dVerified by operator
Idaho State AGbd_57d2ad17d82130962023-05-19 · +6dVerified
Indiana State AGbd_5d844bede7e0dbd92023-04-28 · +15dVerified
Vermont State AGbd_eff70d4adcf75c392023-04-28 · +15dVerified
Washington State AGbd_9ba14f07862a4b382022-10-04 · +221dCandidate

Name: Whitworth University
norm: whitworth university
Domain: whitworth.edu

Name: Whitworth University
norm: whitworth university
Domain: whitworth.edu
Industry: Educationllm

Discovered: Jul 29, 2022
Breach occurred: Jul 29, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 28, 2023
Affected individuals: 65,593state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 12 months of identity theft protection services through IDX, including credit monitoring alerts, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(288 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 288dME resident >60d · 273d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 29, 2022
→ Filed with AG: May 13, 2023
288d 30 days (soft) ME AG >30d
Maine
Discovered: Jul 29, 2022
→ Notified: Apr 28, 2023
273d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 29, 2022 → Filed with AG: May 13, 2023	288d	30 days (soft)	ME AG >30d
Maine	Discovered: Jul 29, 2022 → Notified: Apr 28, 2023	273d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Washington State AGOct 4 · first

Indiana State AG+206d

Vermont State AG+206d

Montana State AG+220d

New Hampshire State AG+220d

California State AG+221d

Oregon State AG+221d

Massachusetts State AG+221d

Maine State AG+221d · this page

Idaho State AG+227d

Pattern: first filing Oct 4 (WA), last May 19 (ID) — a 227-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9cb3cc39-0283-4fb8-937c-0cba35809fff.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 13, 2023
Raw hash: a922ef220778b84a6b96c33ae02707a0e9edc57b7005c5e6af2d2500621936ba

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityWhitworth University

Victim entityWhitworth University

Incidentdiscovered Jul 29, 2022

Stated responseOffered 12 months of identity theft protection services through IDX, including credit monitoring alerts, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov