HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
National Student Clearinghouse
bd_2a4b3c8c4d73dde1 · schema v1 · pii pii-v1
Full breach record for National Student Clearinghouse →National Student Clearinghouse reported an external system breach (hacking) occurring on May 30, 2023, discovered on June 20, 2023. The incident compromised names and Social Security Numbers of 51,689 individuals, including 61 Maine residents. The entity provided written notification on August 31, 2023, and offered 24 months of identity monitoring services via Kroll.
Maine clockDiscovered Jun 20, 2023 → Filed with AG Aug 31, 202372d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 78 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_cf3b44f0d9c611cdLeak Sitecl0pfiled 2023-06-14(78d gap)Verified by operator
Regulatory filings (5) · sorted by filing gap
- bd_b407d20f148d3694Montana State AGfiled 2023-08-31Candidate
- bd_b5e4fea795fb28f9Vermont State AGfiled 2023-08-31Verified
- bd_116e7610d8f2a768Washington State AGfiled 2023-09-21(21d gap)Verified by operator
- bd_3c0bc77e712651d4California State AGfiled 2023-09-21(21d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 21d gap
- bd_f56f2ba4dc387770Oregon State AGfiled 2023-09-21(21d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5b2eed57-d5bd-442e-b7dc-640966bf56dc.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 31, 2023
- Raw hash
- 4b747f978112ca67a1ff12ad77a67835bee24cf684c08c14920753ac0b3ef077
Reporting entity
- Name
- National Student Clearinghousenorm: national student clearinghouse
- Domain
- studentclearinghouse.org
Victim entity
- Name
- National Student Clearinghousenorm: national student clearinghouse
- Domain
- studentclearinghouse.org
Incident
- Discovered
- Jun 20, 2023
- Materiality determined
- —
- Notification sent
- Aug 31, 2023
- Affected individuals
- 51,689
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- ME AG >30d · 72dME resident >60d · 72dLeak >30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 20, 2023→ Filed with AG: Aug 31, 202372d 30 days (soft) ME AG >30d Maine Discovered: Jun 20, 2023→ Notified: Aug 31, 202372d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.