HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICHighContained

LEE UNIVERSITY

bd_81b8b7e84bde761c · schema v1 · pii pii-v1

Full breach record for LEE UNIVERSITY →

Lee University, a private Christian university in Tennessee, notified the Maryland Attorney General of a data security incident discovered on March 22, 2024. Unauthorized access resulted in the potential exposure of personal information for approximately 1,623 Maryland residents, including names, SSNs, driver's licenses, passport numbers, financial account numbers, and health information. Notifications were sent to affected individuals on March 24, 2025, offering 12 months of identity protection services.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,623 affectedView incident

Source provenance

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376731.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: 3cf7982c6e56dd89ddc4d38eecc7280ac60e0ec6cf0740093504553bd92fbca8

Reporting entity

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Victim entity

Name: LEE UNIVERSITY
norm: lee university
Industry: education

Incident

Discovered: Mar 22, 2024
Materiality determined: —
Notification sent: Mar 24, 2025
Affected individuals: 1,623
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Maryland Attorney General
Initial access: valid_credentials

Compliance

Time to disclose: 25 months(762 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.