HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowResolved
ST. NORBERT COLLEGE, INC.
bd_82f9e861688628af · schema v1 · pii pii-v1
Full breach record for ST. NORBERT COLLEGE, INC. →St. Norbert College, an educational institution, reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred and was discovered on September 7, 2020. The breach affected 2 Maine residents and a total of 7,493 individuals. The compromised information included names and financial account numbers (such as credit or debit card numbers) along with their corresponding security codes or PINs. The college notified the affected individuals in writing on January 8, 2021, and offered identity theft protection services.
Maine clockDiscovered Sep 7, 2020 → Filed with AG Jan 8, 2021123d ✗ ME AG >90d18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c102dcca30296c54Montana State AGfiled 2021-01-08Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4d316a25-63cd-4871-9369-c1496e5d911a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 8, 2021
- Raw hash
- 435ddc0eb99b1b3249cdec358ba923c861a97be30d1485b1fe1a4a87e935604d
Reporting entity
- Name
- ST. NORBERT COLLEGE, INC.norm: st norbert college
Victim entity
- Name
- ST. NORBERT COLLEGE, INC.norm: st norbert college
Incident
- Discovered
- Sep 7, 2020
- Materiality determined
- —
- Notification sent
- Jan 8, 2021
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 18 weeks(123 days from discovery to filing)
- Compliance flags
- ME AG >90d · 123dME resident >60d · 123d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 7, 2020→ Filed with AG: Jan 8, 2021123d 90 days ME AG >90d Maine Discovered: Sep 7, 2020→ Notified: Jan 8, 2021123d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.