HackingSupply Chain (3P Vendor)Delayed DiscoveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Vermont Student Assistance Corporation
bd_2c1946e3a02b4317 · schema v1 · pii pii-v1
Full breach record for Vermont Student Assistance Corporation →Vermont Student Assistance Corporation reported a data breach impacting 19,754 individuals due to a third-party system breach. The incident occurred from February 7 to May 20, 2020, and was discovered on July 31, 2020. Exposed information included names and Social Security numbers. Written notifications were sent to affected parties in September 2020.
Maine clockDiscovered Jul 31, 2020 → Filed with AG Sep 25, 202056d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_08c27a98ee1b1bf4California State AGfiled 2020-09-25Verified
- bd_79f77c4712b37181Montana State AGfiled 2020-10-04(9d gap)Verified by operator
- bd_bca2d0e8282fb4bcCalifornia State AGfiled 2020-09-04(21d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f499ebc7-c44a-442c-abad-a43e964044a7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 25, 2020
- Raw hash
- 11b6ea24c99398b802ffd803abfee613fe2f778d901f535a25e2108a4ce8c75a
Reporting entity
- Name
- Vermont Student Assistance Corporationnorm: vermont student assistance
Victim entity
- Name
- Vermont Student Assistance Corporationnorm: vermont student assistance
Incident
- Discovered
- Jul 31, 2020
- Materiality determined
- —
- Notification sent
- Sep 4, 2020
- Affected individuals
- 19,754
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- ME AG >30d · 56d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 31, 2020→ Filed with AG: Sep 25, 202056d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.