HackingEducationEducationCustomer Data InvolvedIdentity (basic)Government IDHighContained

Southern Illinois University

bd_2732dedcb0a5b796 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 25, 2023

Filed

Oct 25, 2023

To disclose

4 weeks

Affected · nationwide

38,28610 in this filing

Linked

8 filings

Confidence

75%

Full breach record for Southern Illinois University →3 incidents on file

Southern Illinois University reported a data breach affecting 10 Maine residents. The breach, which occurred between May 29, 2023, and May 30, 2023, was discovered on September 25, 2023. The incident was categorized as an external system breach (hacking) and resulted in the compromise of names and Social Security numbers. Affected individuals were notified on October 24, 2023, and offered 12 months of complimentary credit monitoring services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 25, 2023 → Filed with AG Oct 25, 202330d ✓ ME AG ≤30d4 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 119 days

discovery → filing · 4 weeks / 30 days

May 29, 2023

Begins

Sep 25, 2023

Discovered

Oct 25, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_e33e37db85c4c9f02023-07-26 · +90dCandidate

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_261124b5e708a7772023-10-25Verified
Massachusetts State AGbd_51bd76ada8e3afff2023-10-25Verified
Montana State AGbd_5d6f47343e13f5432023-10-25Verified
Indiana State AGbd_989eaf8d387964712023-10-24 · +1dCandidate

Show 2 more filings ↓up to 297d gap

New Hampshire State AGbd_a0d9e527bb389a032023-10-30 · +5dVerified
Illinois State AGbd_3b541ee6511b80462023-01-01 · +297dVerified by operator

Name: Southern Illinois University
norm: southern illinois university

Name: Southern Illinois University
norm: southern illinois university
Industry: Educationllm

Discovered: Sep 25, 2023
Breach occurred: May 29, 2023 – May 30, 2023
Undetected for: 119 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 24, 2023
Affected individuals: 38,286state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of complimentary credit monitoring services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: ME AG ≤30d · 30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 25, 2023
→ Filed with AG: Oct 25, 2023
30d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 25, 2023 → Filed with AG: Oct 25, 2023	30d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+296d

Vermont State AG+297d

Massachusetts State AG+297d

Montana State AG+297d

Maine State AG+297d · this page

New Hampshire State AG+302d

Pattern: first filing Jan 1 (IL), last Oct 30 (NH) — a 302-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ba825b04-966d-4f20-8f79-7f0460c52cc2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 25, 2023
Raw hash: 229919728a27687599219144c68cbd539d2553f7e4ac1d400dc0e6d560eb4d32

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entitySouthern Illinois University

Victim entitySouthern Illinois University

Incidentdiscovered Sep 25, 2023

Stated responseOffered 12 months of complimentary credit monitoring services through Experian

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov