DisclosureLens
HackingEducationEducationCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHighContained

Pacific Union College

bd_64057e0121f31e96 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 15, 2022

Filed

Nov 15, 2022

To disclose

4 weeks

Affected · nationwide

3,7441 in this filing

Linked

2 filings

Confidence

50%
Full breach record for Pacific Union College2 incidents on file

Pacific Union College, an educational institution, reported a data breach to the Maine Attorney General's office. The breach, described as an external system breach (hacking), occurred between July 6, 2021, and February 25, 2022, and was discovered on October 15, 2022. The breach affected a total of 3,744 individuals, including one resident of Maine. The compromised information included names and Social Security Numbers. In response, the college offered 12 months of complimentary credit monitoring services through Equifax to those affected. Consumers were notified in writing on November 14, 2022.

Maine clockDiscovered Oct 15, 2022Filed with AG Nov 15, 202231d ME AG >30d4 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 466 days
discovery → filing · 4 weeks / 31 days

Jul 6, 2021

Begins

Oct 15, 2022

Discovered

Nov 15, 2022

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
California State AGNov 15 · first
Maine State AGNov 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.