DisclosureLens
HackingEducationEducationHacking OtherCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Trustees of Thayer Academy

bd_49c60a5208adebc8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 22, 2024

Filed

May 14, 2024

To disclose

22 days

Affected

148scope not determined

Linked

10 records

Confidence

50%
Full breach record for Trustees of Thayer Academy →3 incidents on file

Thayer Academy, an educational institution, experienced an external system breach (hacking) on February 4, 2023, which was discovered on April 22, 2024. The breach resulted in the compromise of personal identifiers, including names, combined with financial account numbers or credit/debit card numbers along with their respective security codes, access codes, passwords, or PINs. A total of 148 Maine residents were affected. In response, Thayer Academy provided written notification to the affected individuals on May 14, 2024, and offered 12 months of identity theft protection services through Experian IdentityWorks.

Leak gap clock✗ Leak >180d22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 443 days
discovery → filing · 22 days

Feb 4, 2023

Begins

Apr 22, 2024

Discovered

May 14, 2024

Filed

This filing is one of 10 records about the same incident.View merged incident
A leak claim by 8base about this victim was first seen 357 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Show 4 more filings ↓up to 406d gap

Filing propagation · 9 filings · 7 states

View merged incident ↗
Vermont State AGApr 4 · first
Massachusetts State AG+1d
New Hampshire State AG+6d
California State AG+406d
Vermont State AG+406d
Indiana State AG+406d
Montana State AG+406d
Maine State AG+406d · this page
New Hampshire State AG+409d

Pattern: first filing Apr 4 (VT), last May 17 (NH) — a 409-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.