PhysicalEducationEducationTheftCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)EducationLowContained

Art Center Inc

bd_838fd36d50dea150 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 27, 2022

Filed

Mar 14, 2023

To disclose

20 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Art Center Inc →

Art Center Inc., d/b/a Northwest College of Art & Design notified consumers that a device containing personal and student information was stolen on October 27, 2022. The data involved names and other personal/student details. The organization reported the theft to law enforcement, reviewed the data, and is offering credit monitoring. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday20 weeks discovery → filing

Incident timeline

discovery → filing · 20 weeks / 138 days

Oct 27, 2022

Begins

Oct 27, 2022

Discovered

Mar 14, 2023

Filed

vs. sector median

+10 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_3a1f646274e783532023-03-14Verified
Washington State AGbd_a0efd411b5276ee82023-03-14Candidate
Montana State AGbd_f67551089d8e7b7c2023-03-14Verified
Maine State AGbd_fb06400ad7c2b40b2023-03-14Verified

Name: Art Center Inc
norm: art center

Name: Art Center Inc
norm: art center
Also named: Art Center Inc.dba oflegal entity
Northwest College of Art & Designdba oftrade name
Industry: Educationllm

Discovered: Oct 27, 2022
Breach occurred: Oct 27, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 14, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Education
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Reported the incident to law enforcement
Began a review of the data that was stored on the stolen device
Offering complimentary credit and identity protection services through IDX
Changes made: Implementing additional security measures on NCAD devices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(138 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGMar 14 · first

Washington State AGMar 14 · first

Montana State AGMar 14 · first

Maine State AGMar 14 · first

Vermont State AGMar 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-03-14-northwest-college-art-and-design-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 14, 2023
Raw hash: 05bd0db41f6980596215305721038ee0bf22e0359abf54e056989c76b074aaf9

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityArt Center Inc

Victim entityArt Center Inc

Incidentdiscovered Oct 27, 2022

Stated responseReported the incident to law enforcement

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov