HackingEducationEducationDelayed DiscoveryData ExfiltratedCustomer Data InvolvedPIILowContained
Dordt University
bd_a4a7861df82a0966 · schema v1 · pii pii-v1
Full breach record for Dordt University →Dordt University reported an external system breach (hacking) in which unauthorized actors accessed its network between approximately April 21, 2024 and May 16, 2024. The breach was discovered on June 19, 2025, over a year after occurrence. A forensic investigation confirmed a limited amount of data was potentially accessed and acquired. 34,251 individuals were affected in total, including 23 Maine residents. Affected individuals were offered 12-month Experian IdentityWorks credit monitoring.
Leak gap clock✗ Leak >180d22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 421 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_d0d992f6c461f22dLeak Sitebianlianfiled 2024-06-13(392d gap)Verified
- bd_93399854efddfd77Leak Sitebianlianfiled 2024-05-16(421d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fbad33e9-bb5e-47d9-a1d6-9356d9ff6e43.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2025
- Raw hash
- 0ca3ba8ed70c847e0e89c24811550775e3ba74b990365435f149f90de5299cb5
Reporting entity
- Name
- Dordt Universitynorm: dordt university
- Domain
- dordt.edu
- Industry
- Education
Victim entity
- Name
- Dordt Universitynorm: dordt university
- Domain
- dordt.edu
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Jun 19, 2025
- Materiality determined
- —
- Notification sent
- Jul 11, 2025
- Affected individuals
- 23
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 22d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 19, 2025→ Filed with AG: Jul 11, 202522d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.