HackingVulnerability ExploitSupply Chain (3P Vendor)Downstream VictimsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Bates College
bd_7f50ad31f0da50b2 · schema v1 · pii pii-v1
Full breach record for Bates College →Bates College reported a data breach impacting students and faculty after two of its third-party service providers, TIAA and National Student Clearinghouse, were compromised in the MOVEit vulnerability exploit. The breach exposed personal identifiers including names and Social Security Numbers. The college offered two years of identity theft protection to the 250 affected Maine residents.
Maine clockDiscovered Jun 20, 2023 → Filed with AG Jul 11, 202321d ✓ ME AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed250 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3f1bc978-bdab-4aac-a188-f356c091e54f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2023
- Raw hash
- 6abc8169eb810a9b748d06e41f824f61adc60399ead95c06c1d61f91b7fb1ceb
Reporting entity
- Name
- Bates Collegenorm: bates college
- Domain
- bates.edu
Victim entity
- Name
- Bates Collegenorm: bates college
- Domain
- bates.edu
Incident
- Discovered
- Jun 20, 2023
- Materiality determined
- —
- Notification sent
- Jul 3, 2023
- Affected individuals
- 250
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 20, 2023→ Filed with AG: Jul 11, 202321d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.