HackingHacking OtherCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Oak Ridge Associated Universities, Incorporated
bd_991a0ec14d6a0e3b · schema v1 · pii pii-v1
Full breach record for Oak Ridge Associated Universities, Incorporated →Oak Ridge Associated Universities, an educational organization, reported an external system breach that occurred from May 28, 2023, to May 30, 2023. The breach was discovered on July 28, 2023, and affected 27 Maine residents. The compromised information included names and Social Security Numbers. In response, the university offered two years of credit monitoring and identity theft protection services through IDX to the affected individuals, who were notified on August 21, 2023.
Maine clockDiscovered Jul 28, 2023 → Filed with AG Aug 21, 202324d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_47bcff9365e9eef7Vermont State AGfiled 2023-08-21Verified
- bd_d835c740d4993730New Hampshire State AGfiled 2023-08-21Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/36a8136d-4b16-4be6-9088-ef2285c83018.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2023
- Raw hash
- af0de35f6becc2548f09ff66cef402782123d6f0ed4de32fdf133ceb87f5ff16
Reporting entity
- Name
- Oak Ridge Associated Universities, Incorporatednorm: oak ridge associated universities
- Domain
- orau.org
Victim entity
- Name
- Oak Ridge Associated Universities, Incorporatednorm: oak ridge associated universities
- Domain
- orau.org
Incident
- Discovered
- Jul 28, 2023
- Materiality determined
- —
- Notification sent
- Aug 21, 2023
- Affected individuals
- 27
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 28, 2023→ Filed with AG: Aug 21, 202324d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.