HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
St. Joseph’s College of Maine
bd_646ed6bdb7fb507e · schema v1 · pii pii-v1
Full breach record for St. Joseph’s College of Maine →St. Joseph College of Maine notified the Maryland Attorney General of a security incident affecting approximately 62 Maryland residents. Unauthorized access to SJCM's network occurred between December 15, 2023, and January 24, 2024. The incident potentially exposed personal information including Social Security numbers, driver's license numbers, financial account numbers, and health insurance information. SJCM contained the incident, engaged forensic investigators, and reported the matter to the FBI. Affected individuals were offered credit monitoring services.
Maryland clock✗ MD AG >90d15 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1c08b719c91d2e39California State AGfiled 2025-03-21Candidate
- bd_1fa5d3c219136161Indiana State AGfiled 2025-03-21Verified
- bd_74be514a8c5e1a79Washington State AGfiled 2025-03-21Verified
- bd_b59dbd6dbb62ca59Montana State AGfiled 2025-03-21Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 21, 2025
- Raw hash
- 7d6fc18ab44d7e9da9c18022d06b4e4567f05e0ed30fe6a04eaaef9847f8d175
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- St. Joseph’s College of Mainenorm: st joseph s college of maine
Incident
- Discovered
- Dec 15, 2023
- Materiality determined
- Feb 20, 2025
- Notification sent
- Mar 21, 2025
- Affected individuals
- 62
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney GeneralReported incident to the Federal Bureau of Investigations
Compliance
- Time to disclose
- 15 months(462 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.