DisclosureLens
HackingEducationEducationStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)MediumContained

Clackamas Community College

bd_3fe4232699729fdd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 18, 2025

Filed

Jan 8, 2026

To disclose

21 days

Affected · nationwide

33,3811 in this filing

Linked

8 filings

Confidence

66%
Full breach record for Clackamas Community College2 incidents on file

Clackamas Community College experienced an external system breach (hacking) involving unauthorized access via compromised user credentials. The incident occurred between October 24 and October 30, 2025, and was discovered on December 18, 2025. Approximately 33,381 individuals were affected, including 1 Maine resident. The data involved names and other personal identifiers. The college engaged forensic investigators, contained the network, and offered 12 months of credit monitoring.

Maine clockDiscovered Dec 18, 2025Filed with AG Jan 8, 202621d ME AG ≤30d21 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 55 days
discovery → filing · 21 days

Oct 24, 2025

Begins

Dec 18, 2025

Discovered

Jan 8, 2026

Filed

vs. sector median

7 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Show 2 more filings

Filing propagation · 7 filings · 7 states

View merged incident ↗
Vermont State AGJan 8 · first
Nebraska State AGJan 8 · first
Montana State AGJan 8 · first
Oregon State AGJan 8 · first
Indiana State AGJan 8 · first
Maine State AGJan 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.