HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Nelnet Campus Commerce
bd_87291d77b11e7de6 · schema v1 · pii pii-v1
Full breach record for Nelnet Campus Commerce →Nelnet Campus Commerce experienced an external system breach between January 17, 2022, and January 19, 2022, discovered on the final day of the intrusion. The breach resulted in the compromise of names and Social Security numbers for affected individuals, including 12 residents of Maine. The company offered 24 months of complimentary identity theft protection services through Experian to those impacted.
Maine clockDiscovered Jan 19, 2022 → Filed with AG Feb 18, 202230d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f8aaef8aa5a5d8ffCalifornia State AGfiled 2022-02-18Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d137b5ba-4597-4be8-baf4-4cf529e65c3a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 18, 2022
- Raw hash
- d14af8230f94cbb9156e97b8180239cf6e45d826dd4ee8e36952822bd64f597f
Reporting entity
- Name
- Nelnet Campus Commercenorm: nelnet campus commerce
Victim entity
- Name
- Nelnet Campus Commercenorm: nelnet campus commerce
Incident
- Discovered
- Jan 19, 2022
- Materiality determined
- —
- Notification sent
- Feb 18, 2022
- Affected individuals
- 12
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 19, 2022→ Filed with AG: Feb 18, 202230d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.