HackingEducationEducationStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountPHIMediumContained

Albion College

bd_58e51e667502f6e5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 17, 2024

Filed

Apr 30, 2025

To disclose

19 weeks

Affected

516state residents only

Linked

8 filings

Confidence

66%

Full breach record for Albion College →

Albion College notified the Washington AG of unauthorized network access on Dec 17, 2024. Investigation concluded Apr 18, 2025, revealing exfiltration of names, SSNs, DOBs, bank info, student IDs, and medical data. ~516 WA residents affected. Notifications sent May 1, 2025, including credit monitoring offers.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d19 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 19 weeks / 134 days

Dec 17, 2024

Begins

Dec 17, 2024

Discovered

Apr 30, 2025

Filed

vs. sector median

+12 wks slower

This filing is one of 8 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 134 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitemedusabd_6ae4bfa3cd6e2ae42024-12-23 · +127dVerified by operator
Leak Sitemedusabd_342ac06b15b44fdf2024-12-17 · +134dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_03211ef4625d44f52025-05-01 · +1dVerified by operator
Indiana State AGbd_7cca37b7de16e3a02025-05-01 · +1dVerified
Maine State AGbd_ba6082db2152b9712025-05-01 · +1dVerified
Nebraska State AGbd_c94d602bc101c6a32025-05-01 · +1dVerified

Show 1 more filing ↓up to 5d gap

New Hampshire State AGbd_c9a7db1480ccd80a2025-05-05 · +5dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Albion College
norm: albion college
Industry: Educationllm

Discovered: Dec 17, 2024
Breach occurred: Dec 17, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 1, 2025
Affected individuals: 516state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Office of Washington Attorney General Consumer Protection Division
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Providing the affected residents with written notification of this incident
Offering the affected residents whose Social Security numbers were impacted complimentary memberships with a credit monitoring service
Advising the affected residents about the process for placing fraud alerts and/or security freezes on their credit files
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(134 days from discovery to filing)
Compliance flags: WA AG >90dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Washington State AGApr 30 · first · this page

Massachusetts State AG+1d

Indiana State AG+1d

Maine State AG+1d

Nebraska State AG+1d

New Hampshire State AG+5d

Pattern: first filing Apr 30 (WA), last May 5 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM19132.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 30, 2025
Raw hash: a1194e2531c787c900aa1854439ac04abf3d339542f532a3c74c7b6c49206f3e

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityAlbion College

Incidentdiscovered Dec 17, 2024

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com