Social EngineeringPhishingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Assumption University
bd_ac9944b354be5317 · schema v1 · pii pii-v1
Full breach record for Assumption University →Assumption University reported a phishing incident occurring between March 4, 2023, and April 4, 2023, discovered on September 18, 2023. The breach compromised names and driver's license numbers of 2,465 individuals, including 48 Maine residents. The university provided written notification on November 17, 2023, and offered 24 months of credit monitoring via TransUnion.
Maine clockDiscovered Sep 18, 2023 → Filed with AG Nov 17, 202360d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,465 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/19c5b68f-decb-4ba5-a55c-faa818ad3f0c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2023
- Raw hash
- ea6c0a2cdd0cb78a5a4454927c78cae53c4b2b37f800bf00ec9fb5e509b269a3
Reporting entity
- Name
- Assumption Universitynorm: assumption university
- Domain
- assumption.edu
Victim entity
- Name
- Assumption Universitynorm: assumption university
- Domain
- assumption.edu
Incident
- Discovered
- Sep 18, 2023
- Materiality determined
- —
- Notification sent
- Nov 17, 2023
- Affected individuals
- 2,465
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- ME AG >30d · 60d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 18, 2023→ Filed with AG: Nov 17, 202360d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.