HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Vermont Student Assistance Corporation
bd_750d4fcbcd027271 · schema v1 · pii pii-v1
Full breach record for Vermont Student Assistance Corporation →Vermont Student Assistance Corporation, a non-profit organization, reported an external system breach (hacking) that occurred between May 7, 2021, and June 30, 2021. The breach was discovered on September 30, 2021, and affected 392 Maine residents. The compromised information included names and Social Security numbers. The organization offered 12 months of credit monitoring, identity restoration services, and identity theft insurance through Experian.
Maine clockDiscovered Sep 30, 2021 → Filed with AG Dec 9, 202170d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed392 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5b857244-f432-4c8a-a597-fb6a3cee5019.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 9, 2021
- Raw hash
- 8c823ff87bdcbb9eee567d8fefb482454b6f821766aad59881cc08fec94df79d
Reporting entity
- Name
- Vermont Student Assistance Corporationnorm: vermont student assistance
Victim entity
- Name
- Vermont Student Assistance Corporationnorm: vermont student assistance
Incident
- Discovered
- Sep 30, 2021
- Materiality determined
- —
- Notification sent
- Dec 8, 2021
- Affected individuals
- 392
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 69d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 30, 2021→ Filed with AG: Dec 9, 202170d 30 days (soft) ME AG >30d Maine Discovered: Sep 30, 2021→ Notified: Dec 8, 202169d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.