DisclosureLens
HackingEducationEducationCustomer Data InvolvedIdentity (basic)Government IDCritical

Lansing Community College

bd_46c8d479a6e66fad · schema v1 · pii pii-v1

Severity

Critical

Discovered

May 24, 2023

Filed

Jun 30, 2023

To disclose

5 weeks

Affected · nationwide

757,832138 in this filing

Linked

9 filings

Confidence

50%
Full breach record for Lansing Community College →2 incidents on file

Lansing Community College reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred between December 25, 2022, and March 15, 2023. The breach was discovered on May 24, 2023. The incident affected 138 Maine residents and involved the acquisition of names or other personal identifiers in combination with Social Security Numbers. The college began notifying affected individuals on June 30, 2023, and offered 12 months of credit monitoring and identity restoration services through Kroll.

Maine clockDiscovered May 24, 2023 → Filed with AG Jun 30, 202337d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 150 days
discovery → filing · 5 weeks / 37 days

Dec 25, 2022

Begins

May 24, 2023

Discovered

Jun 30, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filings ↓up to 10d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗
Indiana State AGJun 30 · first
Massachusetts State AGJun 30 · first
Oregon State AGJun 30 · first
California State AGJun 30 · first
Montana State AGJun 30 · first
Vermont State AGJun 30 · first
Washington State AGJun 30 · first
Maine State AGJun 30 · first · this page
New Hampshire State AG+10d

Pattern: first filing Jun 30 (IN), last Jul 10 (NH) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.