HackingEducationEducationCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHigh

City University of Seattle

bd_1e4ff372859dd9ec · schema v1 · pii pii-v1

Severity

High

Discovered

May 12, 2020

Filed

Dec 9, 2020

To disclose

30 weeks

Affected · nationwide

1,3392 in this filing

Linked

4 filings

Confidence

65%

Full breach record for City University of Seattle →

City University of Seattle reported an external system breach that occurred and was discovered on May 12, 2020. The incident affected 1,339 individuals, compromising their names and Social Security numbers. Affected individuals were notified on December 7, 2020, and offered 12 months of identity protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 12, 2020 → Filed with AG Dec 9, 2020211d ✗ ME AG >90d30 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 30 weeks / 211 days

May 12, 2020

Begins

May 12, 2020

Discovered

Dec 9, 2020

Filed

vs. sector median

+20 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_ac8e2b34c00f5f8d2020-12-09Verified
Washington State AGbd_adbf665aeecb3b2c2020-12-09Verified
Indiana State AGbd_fe22a1791fe9e3c52020-12-07 · +2dVerified

Name: City University of Seattle
norm: city university of seattle

Name: City University of Seattle
norm: city university of seattle
Industry: Educationllm

Discovered: May 12, 2020
Breach occurred: May 12, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 7, 2020
Affected individuals: 1,339state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Written notification sent to affected individuals
Offered 12 months of identity protection services, including credit monitoring, provided by IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(211 days from discovery to filing)
Compliance flags: ME AG >90d · 211dME resident >180d · 209d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 12, 2020
→ Filed with AG: Dec 9, 2020
211d 90 days ME AG >90d
Maine
Discovered: May 12, 2020
→ Notified: Dec 7, 2020
209d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 12, 2020 → Filed with AG: Dec 9, 2020	211d	90 days	ME AG >90d
Maine	Discovered: May 12, 2020 → Notified: Dec 7, 2020	209d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGDec 7 · first

Massachusetts State AG+2d

Washington State AG+2d

Maine State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e09c68b7-91a7-40cc-9002-293100f96ac5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 9, 2020
Raw hash: b34f28a6beb0df4243909aad8c8b0c36499a9729fc580c1627ad75c4d56e0e33

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCity University of Seattle

Victim entityCity University of Seattle

Incidentdiscovered May 12, 2020

Stated responseWritten notification sent to affected individuals

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov