DisclosureLens
HackingStolen CredentialsBusiness Associate (HIPAA)Downstream VictimsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Golden Gate University

bd_8fb8e3a779a0571c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 3, 2023

Filed

Mar 31, 2023

To disclose

8 weeks

Affected · nationwide

5155 in this filing

Confidence

50%
Full breach record for Golden Gate University →

Nonstop Administration and Insurance Services, Inc., acting as a business associate for Golden Gate University, reported a data breach affecting 515 individuals, including 5 Maine residents. An unauthorized third party gained access to their cloud services platform using a valid credential on December 22, 2022. The breach was discovered on February 3, 2023. The compromised information included names and Social Security numbers. Nonstop Administration and Insurance Services is offering 24 months of credit monitoring and identity theft protection services through IDX to those affected.

Maine clockDiscovered Feb 3, 2023 → Filed with AG Mar 31, 202356d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 43 days
discovery → filing · 8 weeks / 56 days

Dec 22, 2022

Begins

Feb 3, 2023

Discovered

Mar 31, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed515 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.