HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Cathedral High School
bd_8e170c5d0a79b390 · schema v1 · pii pii-v1
Full breach record for Cathedral High School →Saint Xavier High School, an educational institution located in Louisville, KY, experienced an external system breach (hacking) between February 7, 2020, and May 20, 2020. The incident was discovered on October 29, 2020. The breach compromised the names and Social Security Numbers of 3,885 individuals, including one Maine resident. The school provided written notification to affected individuals on November 10, 2020, and offered two years of credit monitoring and identity theft protection services through CyberScout.
Maine clockDiscovered Oct 29, 2020 → Filed with AG Nov 10, 202012d ✓ ME AG ≤30d12 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,885 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c29cda9d-2002-47e8-9d5e-71d2fab9fbf8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2020
- Raw hash
- 50d16fb966c5e6b70b95daef713989af2b4c535d7b7dff5e729802297183c317
Reporting entity
- Name
- Cathedral High Schoolnorm: cathedral high school
- Domain
- cathedralhs.org
- Industry
- education
Victim entity
- Name
- Cathedral High Schoolnorm: cathedral high school
- Domain
- cathedralhs.org
- Industry
- education
Incident
- Discovered
- Oct 29, 2020
- Materiality determined
- —
- Notification sent
- Nov 10, 2020
- Affected individuals
- 3,885
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 12d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 29, 2020→ Filed with AG: Nov 10, 202012d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.