MisuseData MishandlingEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALMediumContained
Grinnell College
bd_4f20627998540535 · schema v1 · pii pii-v1
Full breach record for Grinnell College →Grinnell College disclosed that an employee inadvertently moved payroll files to a shared internal folder accessible by any user with credentials. The files contained names, addresses, SSNs, and salary/tax info. No external access or misuse was detected. The incident was contained on the day of discovery (May 7, 2023), and affected individuals were offered credit monitoring.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_102f4406b112fe68Montana State AGfiled 2023-09-29Candidate
- bd_5102201eb428ab79Maine State AGfiled 2023-09-29Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-29-grinnell-college-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2023
- Raw hash
- 337c0f34eaea9fe9f4722b3eacddb90fba9f725f8e1ae43a3697e44aea0e59f9
Reporting entity
- Name
- Grinnell Collegenorm: grinnell college
Victim entity
- Name
- Grinnell Collegenorm: grinnell college
Incident
- Discovered
- May 7, 2023
- Materiality determined
- —
- Notification sent
- Sep 29, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Reporting this incident to the relevant authorities
- Initial access
- insider_action
Compliance
- Time to disclose
- 21 weeks(145 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.