DisclosureLens
UnknownEducationEducationIdentity (basic)Government IDFinancial accountMedium

Lewis & Clark College

bd_6847154486297be4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Filed

Mar 22, 2024

To disclose

Affected

227state residents only

Linked

9 filings

Confidence

59%
Full breach record for Lewis & Clark College4 incidents on file

Lewis and Clark College issued a consumer notification letter dated December 15, 2025, regarding a cybersecurity incident. The letter advises affected individuals to place fraud alerts or security freezes on their credit files and provides contact information for major credit bureaus. It references impacted data including medical information and financial accounts, and lists state-specific resources for residents in Montana, Iowa, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Rhode Island, and Washington D.C.

Incident timeline — partial

? — ?

Breach window unknown

Mar 22, 2024

Filed

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 692d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Indiana State AGMar 22 · first
Washington State AGMar 22 · first
Maine State AGMar 22 · first
Vermont State AGMar 22 · first
California State AGMar 22 · first
Montana State AGMar 22 · first · this page

Pattern: first filing Mar 22 (IN), last Feb 12 (ID) — a 692-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.