HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Hood College
bd_7d091fad0fa5f824 · schema v1 · pii pii-v1
Full breach record for Hood College →Hood College, an educational institution in Maryland, reported an external system breach (hacking) occurring on December 10, 2019, discovered on March 24, 2021. The incident compromised the personal information of 388 individuals, including names and Social Security Numbers. The College notified affected individuals in writing on April 26, 2021, and provided one year of credit monitoring services through Kroll. One Maine resident was affected.
Maine clockDiscovered Mar 24, 2021 → Filed with AG Apr 26, 202133d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed388 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/214b837a-93f3-4967-af01-76d5dbcb1a25.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 26, 2021
- Raw hash
- a1c438e02f970e2592998164a92e2c1b0eef0e8fd6bfc6e8e37c51258abc8b92
Reporting entity
- Name
- Hood Collegenorm: hood college
- Domain
- hood.edu
- Industry
- Education
Victim entity
- Name
- Hood Collegenorm: hood college
- Domain
- hood.edu
- Industry
- Education
Incident
- Discovered
- Mar 24, 2021
- Materiality determined
- —
- Notification sent
- Apr 26, 2021
- Affected individuals
- 388
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- ME AG >30d · 33d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 24, 2021→ Filed with AG: Apr 26, 202133d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.