Goodwin & Company
bd_895012cd91cf620f · schema v1 · pii pii-v1
Full breach record for Goodwin & Company →Goodwin University, Inc. (East Hartford, CT) reported an external system breach (hacking) to the Maine Attorney General. The breach occurred and was discovered on 12/04/2025, affecting 151 individuals total, all of whom were Maine residents. Written consumer notification was sent on 04/16/2026. The filing did not specify the categories of personal information acquired. The university offered 12 months of TransUnion credit monitoring and identity theft recovery services to affected individuals. The notification was submitted by outside counsel Erica Lloyd of Lewis Brisbois Bisgaard & Smith, PLLC.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5fb10ca001cb96f0New Hampshire State AGfiled 2026-05-04Verified
- bd_45379d3343cee216Texas State AGfiled 2026-05-05(1d gap)Candidate
- bd_05c91332a821fa65Indiana State AGfiled 2026-04-16(18d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b142911a-e01e-4f84-9201-b50750e4f418.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 4, 2026
- Raw hash
- 5b0157ef9df47af34f902f0d5b65ba55d49d327c397b40e91247442ab792fb1f
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Goodwin & Companynorm: goodwin
- Domain
- goodwin-co.com
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Dec 4, 2025
- Materiality determined
- —
- Notification sent
- Apr 16, 2026
- Affected individuals
- 151
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification
Compliance
- Time to disclose
- 22 weeks(151 days from discovery to filing)
- Compliance flags
- ME AG >90d · 151dME resident >60d · 133d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 4, 2025→ Filed with AG: May 4, 2026151d 90 days ME AG >90d Maine Discovered: Dec 4, 2025→ Notified: Apr 16, 2026133d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.