HackingEducationEducationIdentity (basic)Government IDCriticalContained

Marymount Manhattan College

bd_a75047f6c6867074 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Aug 22, 2022

Filed

Aug 29, 2022

To disclose

7 days

Affected · nationwide

191,752837 in this filing

Linked

11 filings

Confidence

50%

Full breach record for Marymount Manhattan College →

Marymount Manhattan College reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on November 9, 2021. The breach was discovered on August 22, 2022, and affected 837 Maine residents. The compromised information included names and Social Security numbers. The college began notifying affected individuals on August 29, 2022, and offered 12 months of complimentary credit and identity monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d7 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 286 days

discovery → filing · 7 days

Nov 9, 2021

Begins

Aug 22, 2022

Discovered

Aug 29, 2022

Filed

vs. sector median

8 wks faster

This filing is one of 11 about the same incident.View merged incident

A leak claim by conti about this victim predates this filing by 286 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_d8037889dd5eb2182021-11-16 · +286dVerified by operator

Regulatory filings (9) · sorted by filing gap

Oregon State AGbd_2834d42f9f35cecd2022-08-03 · +26dVerified by operator
Washington State AGbd_2f79fd085919e80f2022-08-03 · +26dVerified
Maine State AGbd_6ca5c664e228016a2022-08-03 · +26dVerified by operator
Massachusetts State AGbd_77eaeebaafde38102022-08-03 · +26dVerified by operator

Show 5 more filings ↓up to 31d gap

Montana State AGbd_a908f58626ff956c2022-08-03 · +26dVerified
Indiana State AGbd_dba28ad85e1dada02022-08-03 · +26dVerified by operator
Delaware State AGbd_e0aca274db9d116f2022-08-03 · +26dVerified
California State AGbd_eca2904e9c4a74382022-08-03 · +26dCandidate
Delaware State AGbd_306f7347da1c40a42022-07-29 · +31dCandidate

Name: Marymount Manhattan College
norm: marymount manhattan college

Name: Marymount Manhattan College
norm: marymount manhattan college
Industry: Educationllm

Discovered: Aug 22, 2022
Breach occurred: Nov 9, 2021
Undetected for: 286 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 29, 2022
Affected individuals: 191,752state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of complimentary credit and identity monitoring services.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: Leak >180dME AG ≤30d · 7d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 22, 2022
→ Filed with AG: Aug 29, 2022
7d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 22, 2022 → Filed with AG: Aug 29, 2022	7d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 8 states

View merged incident ↗

Delaware State AGJul 29 · first

Oregon State AG+5d

Washington State AG+5d

Maine State AG+5d

Massachusetts State AG+5d

Montana State AG+5d

Indiana State AG+5d

Delaware State AG+5d

California State AG+5d

Maine State AG+31d · this page

Pattern: first filing Jul 29 (DE), last Aug 29 (ME) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6575693a-32c1-4095-808a-0749d36c2124.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2022
Raw hash: 98de84b94ab0f29db7fdbd0ead17c7fc947f3e849a39bfabb3676498f2d76e55

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityMarymount Manhattan College

Victim entityMarymount Manhattan College

Incidentdiscovered Aug 22, 2022

Stated responseOffered 12 months of complimentary credit and identity monitoring services.

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov