DisclosureLens
HackingEducationEducationCustomer Data InvolvedFinancial accountFinancial credentialsLowActive

Connecticut College

bd_96ece187cc7fdefa · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 11, 2024

Filed

Feb 7, 2024

To disclose

27 days

Affected

954scope not determined

Linked

6 filings

Confidence

50%
Full breach record for Connecticut College5 incidents on file

Connecticut College reported a data breach affecting 954 Maine residents. The breach, which occurred on March 3, 2023 and was discovered on January 11, 2024, was the result of an external system breach (hacking). The compromised information included financial account numbers or credit/debit card numbers along with their access codes. Consumers were notified on February 7, 2024, and offered identity theft protection services.

Maine clockDiscovered Jan 11, 2024Filed with AG Feb 7, 202427d ME AG ≤30d27 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 314 days
discovery → filing · 27 days

Mar 3, 2023

Begins

Jan 11, 2024

Discovered

Feb 7, 2024

Filed

vs. sector median

5 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 5d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Vermont State AGFeb 7 · first
Indiana State AGFeb 7 · first
Montana State AGFeb 7 · first
Maine State AGFeb 7 · first · this page

Pattern: first filing Feb 7 (VT), last Feb 12 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.