HackingEducationEducationCustomer Data InvolvedPIILowContained
Johnson & Wales University
bd_69a06102553e497b · schema v1 · pii pii-v1
Full breach record for Johnson & Wales University →Johnson & Wales University reported an external system breach (hacking) to the Maine AG. The breach occurred between May 13, 2024 and July 11, 2024, and was discovered on August 21, 2024. A total of 22,710 individuals were affected nationwide, including 159 Maine residents. Affected individuals were notified on September 19, 2024 and offered 12 months of Kroll credit and identity monitoring services.
Maine clockDiscovered Aug 21, 2024 → Filed with AG Sep 19, 202429d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1ee9a4b8bff93a07New Hampshire State AGfiled 2024-09-19Verified
- bd_3d501478fa8a2c89Montana State AGfiled 2024-09-19Candidate
- bd_808aca33228f5a05Vermont State AGfiled 2024-09-19Verified
- bd_c97f4023e6eb029cIndiana State AGfiled 2024-09-19Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/710eeadd-d5c6-4f03-b704-d69a73841776.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2024
- Raw hash
- 605ddf09aa373e99f517a7dc22534afb18606af469e7bb8267ab23f7ac92ae0c
Reporting entity
- Name
- Johnson & Wales Universitynorm: johnson wales university
- Domain
- jwu.edu
- Industry
- Education
Victim entity
- Name
- Johnson & Wales Universitynorm: johnson wales university
- Domain
- jwu.edu
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Aug 21, 2024
- Materiality determined
- —
- Notification sent
- Sep 19, 2024
- Affected individuals
- 159
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 21, 2024→ Filed with AG: Sep 19, 202429d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.