HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
University of St. Thomas - Houston
bd_a02c5ca4989a76f7 · schema v1 · pii pii-v1
Full breach record for University of St. Thomas - Houston →University of St. Thomas-Houston reported an external system breach (hacking) occurring on July 25, 2025, discovered on March 24, 2026. The incident affected 3 Maine residents. The organization notified the Maine Attorney General and provided 12 months of credit monitoring and identity theft services through Experian to affected individuals.
Maine clockDiscovered Mar 24, 2026 → Filed with AG May 26, 202663d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_037d756f27dcba8fIndiana State AGfiled 2026-05-26Verified by operator
- bd_3dbc3d21cb3f1e7fVermont State AGfiled 2026-05-26Verified
- bd_fbc9720e76119e2aNew Hampshire State AGfiled 2026-05-27(1d gap)Verified
- bd_c8affa11c4871b0dTexas State AGfiled 2026-05-28(2d gap)Verified by operator
Show 2 more filings ↓Show fewer ↑up to 78d gap
- bd_f485349c6738905aMassachusetts State AGfiled 2026-05-01(25d gap)Verified by operator
- bd_ade2037bf6e50199Texas State AGfiled 2026-03-09(78d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4536ec23-4bdc-4c7d-81aa-eff55a69428a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 26, 2026
- Raw hash
- 9155398267b1edda35ee24a0fece0f45774b40132eb2c36c7b522bca5a983265
Reporting entity
- Name
- University of St. Thomas - Houstonnorm: university of st thomas houston
Victim entity
- Name
- University of St. Thomas - Houstonnorm: university of st thomas houston
Incident
- Discovered
- Mar 24, 2026
- Materiality determined
- —
- Notification sent
- May 26, 2026
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- ME AG >30d · 63dME resident >60d · 63d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 24, 2026→ Filed with AG: May 26, 202663d 30 days (soft) ME AG >30d Maine Discovered: Mar 24, 2026→ Notified: May 26, 202663d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.