HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Gulf Coast State College (GCSC)
bd_443813483e474eea · schema v1 · pii pii-v1
Full breach record for Gulf Coast State College (GCSC) →Gulf Coast State College, an educational institution in Florida, reported an external system breach (hacking) occurring between March 31, 2020, and June 3, 2020. The incident was discovered on August 12, 2020. The breach compromised the names and Social Security Numbers of 11,309 individuals, including 9 Maine residents. The College provided written notification to affected individuals on September 29, 2020, and offered one year of credit monitoring and identity theft protection services through Kroll.
Maine clockDiscovered Aug 12, 2020 → Filed with AG Sep 29, 202048d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11,309 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bc400edd-dd6e-41a5-ab57-12f2d438d8c2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2020
- Raw hash
- 3c2f2546bdf2621f77f489a23b75c49a5109aac53296042b2c603a83c4622862
Reporting entity
- Name
- Gulf Coast State College (GCSC)norm: gulf coast state college gcsc
- Industry
- Education
Victim entity
- Name
- Gulf Coast State College (GCSC)norm: gulf coast state college gcsc
- Industry
- Education
Incident
- Discovered
- Aug 12, 2020
- Materiality determined
- —
- Notification sent
- Sep 29, 2020
- Affected individuals
- 11,309
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 12, 2020→ Filed with AG: Sep 29, 202048d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.