AccidentalEducationEducationMisconfigurationCustomer Data InvolvedPIIIdentity (basic)LowContained

Mott Community College

bd_898535a74c409dfa · schema v1 · pii pii-v2

Severity

Low

Discovered

Oct 16, 2024

Filed

May 29, 2025

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

67%

Full breach record for Mott Community College →2 incidents on file

Mott Community College notified Nebraska residents of a data security incident involving a misconfiguration of Google Groups on October 16, 2024. The misconfiguration inadvertently shared groups containing personal information (names, addresses) with unauthorized personnel. The issue was corrected, and forensic review confirmed the scope. Affected individuals were offered complimentary credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 16, 2024

Discovered

May 29, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_405a70560a8b99e82025-05-29Candidate
Massachusetts State AGbd_ac5d5abdc14d99b32025-05-29Verified

Name: Mott Community College
norm: mott community college

Name: Mott Community College
norm: mott community college
Industry: Educationllm

Discovered: Oct 16, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Misconfiguration
MITRE ATT&CK: T1535 Use of Cloud Storage

During the incident: Conducted an internal investigation
Corrected the issue and reconfigured the Google Groups
Working very closely with external cybersecurity professionals
Review of the data stored in the various Google Groups
Offering a complimentary month membership of Experian IdentityWorksSM Credit 3B
Changes made: Reconfigured the Google Groups
Continually evaluate and modify our practices to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMay 29 · first

Massachusetts State AGMay 29 · first

Nebraska State AGMay 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/5a041cfe-12e7-4127-b8f8-16d83f277bc8.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2025
Raw hash: 06877cecb9c6f6776219c880083b2b4f34fb88fb180c55ec8c7d6762d0479a45

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMott Community College

Victim entityMott Community College

Incidentdiscovered Oct 16, 2024

Stated responseConducted an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov