HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
DigiPen Institute of Technology
bd_6216d9c75317347b · schema v1 · pii pii-v1
Full breach record for DigiPen Institute of Technology →DigiPen Institute of Technology experienced an external system breach (hacking) on April 21, 2022, discovered on July 12, 2022. Approximately 6,218 individuals were affected, including 5 Maine residents. The breach compromised names and driver's license numbers. The entity provided 12 months of credit monitoring through Equifax.
Maine clockDiscovered Jul 12, 2022 → Filed with AG Jul 19, 20227d ✓ ME AG ≤30d7 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_205f854c90309ba3Montana State AGfiled 2022-07-26(7d gap)Verified
- bd_df0fc57f279a42faWashington State AGfiled 2022-07-26(7d gap)Verified
- bd_eaacf141213b117bMaine State AGfiled 2022-07-26(7d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/18a8f2b0-6e44-4f7b-88e0-7b552e1c1267.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 19, 2022
- Raw hash
- bf478d02966ce80923ec7e732e3cc4dbc67a52802c9fcf10692c3a5dd49861f1
Reporting entity
- Name
- DigiPen Institute of Technologynorm: digipen institute of
Victim entity
- Name
- DigiPen Institute of Technologynorm: digipen institute of
Incident
- Discovered
- Jul 12, 2022
- Materiality determined
- —
- Notification sent
- Jul 25, 2022
- Affected individuals
- 6,218
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 days(7 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 7d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 12, 2022→ Filed with AG: Jul 19, 20227d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.