DisclosureLens
AccidentalEducationEducationMisconfigurationEmployee Data InvolvedTargetedPIIIdentity (basic)EmploymentLowResolved

Grinnell College

bd_9ed8c50a1b6280cb · schema v1 · pii pii-v1

Severity

Low

Discovered

May 7, 2023

Filed

Oct 2, 2023

To disclose

21 weeks

Affected

11state residents only

Linked

6 filings

Confidence

66%
Full breach record for Grinnell College4 incidents on file

Grinnell College notified the NH AG of an error on May 7, 2023, where payroll files containing employee PII were inadvertently saved in a shared folder accessible to authenticated users. Files were moved on March 13, 2023. 11 NH residents affected. No evidence of misuse. Remediation included restricting access, engaging forensic firm, and offering credit monitoring.

Incident timeline

undetected · 55 days
discovery → filing · 21 weeks / 148 days

Mar 13, 2023

Begins

May 7, 2023

Discovered

Oct 2, 2023

Filed

vs. sector median

+13 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 3d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGSep 29 · first
Massachusetts State AGSep 29 · first
Vermont State AGSep 29 · first
Maine State AGSep 29 · first
Indiana State AGSep 29 · first
New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.