DisclosureLens
UnknownEducationEducationCustomer Data InvolvedPIILowContained

Tulane University

bd_806773eacf19677c · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 12, 2026

Filed

May 12, 2026

To disclose

9 weeks

Affected

127state residents only

Linked

12 records

Confidence

63%
Full breach record for Tulane University →3 incidents on file

Tulane University reported a data breach affecting 127 Maine residents. The incident occurred on August 10, 2025, and was discovered on March 12, 2026. The specific nature of the breach is listed as 'Other' with no specific attack vector identified. Tulane provided written notification to affected individuals on April 2, 2026, and offered one year of credit monitoring and identity protection services through Experian.

Maine clockDiscovered Mar 12, 2026 → Filed with AG May 12, 202661d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 214 days
discovery → filing · 9 weeks / 61 days

Aug 10, 2025

Begins

Mar 12, 2026

Discovered

May 12, 2026

Filed

This filing is one of 12 records about the same incident.View merged incident
A leak claim by cl0p about this victim was first seen 172 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 40d gap

Showing first 10 of 11 linked disclosures.

Filing propagation · 11 filings · 11 states

View merged incident ↗
Nebraska State AGApr 2 · first
Indiana State AGApr 2 · first
Illinois State AG+29d
Montana State AG+40d
Vermont State AG+40d
Massachusetts State AG+40d
Oregon State AG+40d
California State AG+40d
New Hampshire State AG+40d
Maine State AG+40d · this page
Texas State AG+42d

Pattern: first filing Apr 2 (NE), last May 14 (TX) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.