DisclosureLens
HackingEducationEducationCustomer Data InvolvedIdentity (basic)Financial accountMediumResolved

ST. NORBERT COLLEGE, INC.

bd_82f9e861688628af · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 7, 2020

Filed

Jan 8, 2021

To disclose

18 weeks

Affected · nationwide

7,4932 in this filing

Linked

6 filings

Confidence

50%
Full breach record for ST. NORBERT COLLEGE, INC. →

St. Norbert College, an educational institution, reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred and was discovered on September 7, 2020. The breach affected 2 Maine residents and a total of 7,493 individuals. The compromised information included names and financial account numbers (such as credit or debit card numbers) along with their corresponding security codes or PINs. The college notified the affected individuals in writing on January 8, 2021, and offered identity theft protection services.

Maine clockDiscovered Sep 7, 2020 → Filed with AG Jan 8, 2021123d ✗ ME AG >90d18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 18 weeks / 123 days

Sep 7, 2020

Begins

Sep 7, 2020

Discovered

Jan 8, 2021

Filed

vs. sector median

+11 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 7d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Illinois State AGJan 1 · first
Massachusetts State AG+7d
Montana State AG+7d
Indiana State AG+7d
Maine State AG+7d · this page
New Hampshire State AG+10d

Pattern: first filing Jan 1 (IL), last Jan 11 (NH) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.