PhysicalTheftCustomer Data InvolvedIDENTITY_BASICLowContained
Art Center Inc
bd_838fd36d50dea150 · schema v1 · pii pii-v1
Full breach record for Art Center Inc →Northwest College of Art and Design (Art Center Inc.) notified consumers that a device containing personal and student information was stolen on October 27, 2022. The incident involved theft of a physical device. Affected data included names and other elements. The organization reported the theft to law enforcement, reviewed the data, implemented additional security measures, and offered complimentary credit and identity protection services.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a0efd411b5276ee8Washington State AGfiled 2023-03-14Candidate
- bd_f67551089d8e7b7cMontana State AGfiled 2023-03-14Verified
- bd_fb06400ad7c2b40bMaine State AGfiled 2023-03-14Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-03-14-northwest-college-art-and-design-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 14, 2023
- Raw hash
- 05bd0db41f6980596215305721038ee0bf22e0359abf54e056989c76b074aaf9
Reporting entity
- Name
- Art Center Incnorm: art center
Victim entity
- Name
- Art Center Incnorm: art center
Incident
- Discovered
- Oct 27, 2022
- Materiality determined
- Mar 8, 2023
- Notification sent
- Mar 14, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- reported the incident to law enforcement
Compliance
- Time to disclose
- 20 weeks(138 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.