HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Kaplan North America, LLC
bd_a1a2590136ab7edd · schema v1 · pii pii-v1
Full breach record for Kaplan North America, LLC →Kaplan North America, LLC notified consumers of a data breach where unauthorized actors accessed servers between Oct 30 and Nov 18, 2025. Compromised data included names, SSNs, and driver's license numbers. Kaplan engaged external IT specialists, alerted law enforcement, and offered credit monitoring via Experian.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 11 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_03ac6b2ac5b6d4a6Indiana State AGfiled 2026-03-17Candidate
- bd_1e887c69b831ca2bCalifornia State AGfiled 2026-03-17Verified
- bd_3af6a5c8e815660bMaine State AGfiled 2026-03-17Verified
- bd_43bbc55f2a1fdb41South Carolina State AGfiled 2026-03-17Verified
Show 6 more filings ↓Show fewer ↑up to 1d gap
- bd_5195761b433bf377New Hampshire State AGfiled 2026-03-17Verified
- bd_6cd40678378733bbIowa State AGfiled 2026-03-17Verified
- bd_7eccbae29faca690Washington State AGfiled 2026-03-17Verified
- bd_9cd5c500ae4a6563Delaware State AGfiled 2026-03-17Verified
- bd_dde3052cb27cb9c5Oregon State AGfiled 2026-03-17Verified
- bd_2163f3082d7a92d9Texas State AGfiled 2026-03-18(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-17-kaplan-north-america-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2026
- Raw hash
- 832e6c638da9f4475614535901ffdb5ff081a314a08116532179d4dd89747be1
Reporting entity
- Name
- Kaplan North America, LLCnorm: kaplan north america
- Domain
- kaplan.com
Victim entity
- Name
- Kaplan North America, LLCnorm: kaplan north america
- Domain
- kaplan.com
Incident
- Discovered
- Nov 18, 2025
- Materiality determined
- Feb 21, 2026
- Notification sent
- Mar 17, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.