HackingEducationEducationVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryTargetedPIIIDENTITY_GOVERNMENTMediumResolved
CAMBRIDGE UNIVERSITY PRESS & ASSESSMENT INDIA PRIVATE LIMITED
bd_796965d352b1ce94 · schema v1 · pii pii-v1
Full breach record for CAMBRIDGE UNIVERSITY PRESS & ASSESSMENT INDIA PRIVATE LIMITED →Cambridge University Press & Assessment (CUPA) experienced a network intrusion during June 3–7, 2024, in which an unauthorized actor exfiltrated data from a subsidiary network segment in Australia on June 5, 2024. On April 8, 2025, CUPA determined that 68 Maine residents' names and Social Security numbers were among the affected files. Consumer notifications were mailed April 23, 2025. Two years of Experian credit monitoring was offered to affected individuals.
Leak gap clock✗ Leak >180d15 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 322 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_376a18b384effbd9Leak Siteinc_ransomfiled 2024-06-24(303d gap)Verified
- bd_4ca07a68d8bd05d6Leak Siteinc_ransomfiled 2024-06-05(322d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_6335ccbbbad76b8aCalifornia State AGfiled 2025-04-23Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/033e24ec-a9dd-42d9-b50c-601ccb88df05.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2025
- Raw hash
- 25ba38dea1e03b1d49ea774148aa80968ebf8c82ef5332c23734e3f2df4c3ac8
Reporting entity
- Name
- CAMBRIDGE UNIVERSITY PRESS & ASSESSMENT INDIA PRIVATE LIMITEDnorm: cambridge university press assessment india private
- Domain
- cambridge.org
Victim entity
- Name
- CAMBRIDGE UNIVERSITY PRESS & ASSESSMENT INDIA PRIVATE LIMITEDnorm: cambridge university press assessment india private
- Domain
- cambridge.org
- Industry
- Educationllm
Incident
- Discovered
- Apr 8, 2025
- Materiality determined
- —
- Notification sent
- Apr 23, 2025
- Affected individuals
- 68
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 15 days(15 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 15d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 8, 2025→ Filed with AG: Apr 23, 202515d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.