HackingEducationEducationStolen CredentialsCapture App DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIILowContained
Green Mountain Higher Education Consortium
bd_839357b382bf342b · schema v1 · pii pii-v1
Full breach record for Green Mountain Higher Education Consortium →Green Mountain Higher Education Consortium (GMHEC), an education consortium in Shelburne, VT, discovered suspicious activity in its email environment on November 19, 2024. An unauthorized actor accessed or acquired data from two employee email accounts between October 30 and November 20, 2024. Personal information (names and other PII) of 3,184 individuals (37 Maine residents) was involved. Notifications were sent October 29, 2025. Credit monitoring via TransUnion/Cyberscout was offered.
Maine clockDiscovered Nov 19, 2024 → Filed with AG Oct 28, 2025343d ✗ ME AG >90d49 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2e095862dd9d9c72Montana State AGfiled 2025-10-28Candidate
- bd_87ae2a443c10c16dNew Hampshire State AGfiled 2025-10-28Verified
- bd_4c9abb5f745f9621Vermont State AGfiled 2025-10-29(1d gap)Verified
- bd_e7abcb99918b2bd5Indiana State AGfiled 2025-10-29(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/78508eab-7567-4d6a-987f-40b53bb44b0e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 28, 2025
- Raw hash
- 958415b6151c179a1df1fe5076053fc785c52b0f27e13fa225e9ec49f12efec0
Reporting entity
- Name
- Green Mountain Higher Education Consortiumnorm: green mountain higher education consortium
- Industry
- Education
Victim entity
- Name
- Green Mountain Higher Education Consortiumnorm: green mountain higher education consortium
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Nov 19, 2024
- Materiality determined
- —
- Notification sent
- Oct 29, 2025
- Affected individuals
- 37
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 49 weeks(343 days from discovery to filing)
- Compliance flags
- ME AG >90d · 343dME resident >180d · 344d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 19, 2024→ Filed with AG: Oct 28, 2025343d 90 days ME AG >90d Maine Discovered: Nov 19, 2024→ Notified: Oct 29, 2025344d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.