AccidentalMisdeliveryCustomer Data InvolvedPIIIDENTITY_GOVERNMENTHighResolved
Grinnell College
bd_5102201eb428ab79 · schema v1 · pii pii-v1
Full breach record for Grinnell College →Grinnell College reported an inadvertent disclosure of personal information, including Social Security Numbers, affecting 2,319 individuals (6 in Maine). The breach occurred on March 13, 2023, and was discovered on May 7, 2023. Notification was sent on September 29, 2023, offering 12 months of Experian IdentityWorks.
Maine clockDiscovered May 7, 2023 → Filed with AG Sep 29, 2023145d ✗ ME AG >90d21 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_102f4406b112fe68Montana State AGfiled 2023-09-29Candidate
- bd_4f20627998540535Vermont State AGfiled 2023-09-29Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ae84d903-b287-404d-a09d-dd1efb9c652d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2023
- Raw hash
- f3861525f62aac602a04397fc7dd7eeaa69cd68961c99c4c8ec6ded2e0504d68
Reporting entity
- Name
- Grinnell Collegenorm: grinnell college
- Industry
- education
Victim entity
- Name
- Grinnell Collegenorm: grinnell college
- Industry
- education
Incident
- Discovered
- May 7, 2023
- Materiality determined
- —
- Notification sent
- Sep 29, 2023
- Affected individuals
- 2,319
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1119 Automated Collection
- Regulator citations
- Filed data breach notice with Maine Attorney General
Compliance
- Time to disclose
- 21 weeks(145 days from discovery to filing)
- Compliance flags
- ME AG >90d · 145dME resident >60d · 145d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 7, 2023→ Filed with AG: Sep 29, 2023145d 90 days ME AG >90d Maine Discovered: May 7, 2023→ Notified: Sep 29, 2023145d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.