HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
University of Maryland Global Campus
bd_262b752d50461fbf · schema v1 · pii pii-v1
Full breach record for University of Maryland Global Campus →University of Maryland Global Campus reported an external system breach (hacking) on October 7, 2021, affecting approximately 8,354 individuals, including 18 Maine residents. The breach compromised names and Social Security Numbers. The university notified affected individuals on October 22, 2021, and provided 24 months of credit monitoring and identity theft services through IDX.
Maine clockDiscovered Oct 7, 2021 → Filed with AG Nov 5, 202129d ✓ ME AG ≤30d29 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_cdd6ceb837eb0a2aCalifornia State AGfiled 2021-11-05Verified
- bd_647b7383837d3036Montana State AGfiled 2021-10-22(14d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/54c15248-6dc4-4f95-b687-3a37eae78b4a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 5, 2021
- Raw hash
- a84d4fbb7d6d69db8e3862b0459443477fbee1234ddf6ac6e72d9183c6f6fbb8
Reporting entity
- Name
- University of Maryland Global Campusnorm: university of maryland global campus
- Industry
- Education
Victim entity
- Name
- University of Maryland Global Campusnorm: university of maryland global campus
- Industry
- Education
Incident
- Discovered
- Oct 7, 2021
- Materiality determined
- —
- Notification sent
- Oct 22, 2021
- Affected individuals
- 8,354
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 7, 2021→ Filed with AG: Nov 5, 202129d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.