HackingCustomer Data InvolvedIDENTITY_BASICLow
Institute of Culinary Education
bd_764f9f8bb216912f · schema v1 · pii pii-v1
Full breach record for Institute of Culinary Education →The Institute of Culinary Education, an educational institution, reported an external system breach (hacking) that occurred on April 21, 2025, and was discovered on August 26, 2025. The breach affected 46 Maine residents. In response, the institute offered 12 months of credit monitoring and identity theft protection services through Epiq. Consumers were notified on September 26, 2025, and October 6, 2025.
Maine clockDiscovered Aug 26, 2025 → Filed with AG Oct 7, 202542d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by payoutsking about this victim predates this filing by 132 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_bf365248a92aa206Leak Sitepayoutskingfiled 2025-05-28(132d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_35009cefd8198a45California State AGfiled 2025-10-07Verified
- bd_fe182067ed3126aeTexas State AGfiled 2025-10-07Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/19ae3183-eb7f-4985-a5f5-34871731c980.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 7, 2025
- Raw hash
- b189a95a63e4bbeffbb1400a3470474a0ee291a22e48c7c67eaefdb8dffed229
Reporting entity
- Name
- Institute of Culinary Educationnorm: institute of culinary education
- Domain
- ice.edu
Victim entity
- Name
- Institute of Culinary Educationnorm: institute of culinary education
- Domain
- ice.edu
Incident
- Discovered
- Aug 26, 2025
- Materiality determined
- —
- Notification sent
- Sep 26, 2025
- Affected individuals
- 46
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- ME AG >30d · 42dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 26, 2025→ Filed with AG: Oct 7, 202542d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.