DisclosureLens
UnknownEducationEducationIdentity (basic)Government IDFinancial accountMedium

Lewis & Clark College

bd_6847154486297be4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 22, 2024

To disclose

—

Affected

227state residents only

Linked

9 records

Confidence

59%
Full breach record for Lewis & Clark College →3 incidents on file

Lewis and Clark College issued a consumer notification letter dated December 15, 2025, regarding a cybersecurity incident. The letter advises affected individuals to place fraud alerts or security freezes on their credit files and provides contact information for major credit bureaus. It references impacted data including medical information and financial accounts, and lists state-specific resources for residents in Montana, Iowa, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Rhode Island, and Washington D.C.

Leak gap clock✗ Leak >180d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Mar 22, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 9 records about the same incident.View merged incident
A leak claim by vicesociety about this victim was first seen 357 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 692d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Indiana State AGMar 22 · first
Washington State AGMar 22 · first
Maine State AGMar 22 · first
Vermont State AGMar 22 · first
California State AGMar 22 · first
Montana State AGMar 22 · first · this page
Oregon State AG+19d
Idaho State AG+692d

Pattern: first filing Mar 22 (IN), last Feb 12 (ID) — a 692-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.