AccidentalMisdeliveryDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained

Alma College

bd_5923cd2698fe4d9b · schema v1 · pii pii-v1

Alma College disclosed an inadvertent data exposure on its internal SharePoint system from March 2023 to April 2024. The incident involved the mistaken publication of files containing names, SSNs, dates of birth, and health insurance information. The college engaged cybersecurity specialists, reviewed the scope, and offered 12 months of credit monitoring to affected individuals.

Vermont clock✗ VT AG >45 bday20 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Source provenance

Source URL: https://ago.vermont.gov/document/2024-09-11-alma-college-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 11, 2024
Raw hash: 866e6269faaa5f29f0c25569969b7c0d3e0b599e5d37fb96c6b73fd71c4f84ed

Reporting entity

Name: Alma College
norm: alma college

Victim entity

Name: Alma College
norm: alma college

Incident

Discovered: Apr 24, 2024
Materiality determined: Sep 11, 2024
Notification sent: Sep 11, 2024
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection

Compliance

Time to disclose: 20 weeks(140 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.