Cornish College of the Arts
bd_74673effc56edb91 · schema v1 · pii pii-v1
Full breach record for Cornish College of the Arts →Correction: we date this filing May 6, 2022, not 5/6/2021 as the Montana Department of Justice's breach register prints it. That date is earlier than the start of the breach the same register row reports (6/6/2021), and the Maine, Washington, Massachusetts and California breach registers list this notice on May 6, 2022.
Cornish College of the Arts notified affected individuals of unauthorized network access occurring between June 6-10, 2021. The incident potentially exposed full names. Cornish contained the threat, engaged outside cybersecurity professionals, and offered one year of Experian IdentityWorks credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 6, 2021
Begins
May 6, 2022
Filed
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Washington State AGbd_020708122f53f3932022-05-06Verified
- California State AGbd_7fb26e03c9c070182022-05-06Verified
- Massachusetts State AGbd_a824b886bc07c90b2022-05-06Verified
- Maine State AGbd_fb30b45e0dc7f9612022-05-06Verified
Show 3 more filings ↓Show fewer ↑up to 365d gap
- New Hampshire State AGbd_9b3f4f6dd05898532022-05-12 · +6dVerified
- Oregon State AGbd_e2d9c81ab16bf4c92022-05-23 · +17dVerified
- Indiana State AGbd_15698c296d0dfd722021-05-06 · +365dVerified
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing May 6 (IN), last May 23 (OR) — a 382-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.