HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
National Math and Science Initiative
bd_4182a4dc5d0f9b68 · schema v1 · pii pii-v1
Full breach record for National Math and Science Initiative →National Math and Science Initiative experienced an external system breach (hacking) between September 23, 2021, and October 18, 2021. The incident was discovered on January 6, 2022, affecting 191,255 individuals, including 14 Maine residents. The breach compromised names and Social Security Numbers. Written notification was sent on February 7, 2022. No identity theft protection services were offered.
Maine clockDiscovered Jan 6, 2022 → Filed with AG Feb 7, 202232d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by conti about this victim predates this filing by 109 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_b37c007a97ec7ad9California State AGfiled 2022-02-07Verified
- bd_dbb3d06883de0bf3Montana State AGfiled 2022-02-07Verified
- bd_3db1dbaf5f5f93c8South Carolina State AGfiled 2022-02-08(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1f96651a-3919-4afe-9aec-5e15fb46df48.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2022
- Raw hash
- 3fe43f1ca8b5fc43e4d48ed70bc74c0f020c41328cc8f0d80519e9b3af252206
Reporting entity
- Name
- National Math and Science Initiativenorm: national math and science initiative
- Domain
- nms.org
- Industry
- Education
Victim entity
- Name
- National Math and Science Initiativenorm: national math and science initiative
- Domain
- nms.org
- Industry
- Education
Incident
- Discovered
- Jan 6, 2022
- Materiality determined
- —
- Notification sent
- Feb 7, 2022
- Affected individuals
- 191,255
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 6, 2022→ Filed with AG: Feb 7, 202232d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.