Connecticut College
bd_add1502cea9bc4e5 · schema v1 · pii pii-v1
Full breach record for Connecticut College →Connecticut College notified the California Attorney General of a data security incident where an unauthorized party accessed and acquired files containing personal information. The incident was detected on March 3, 2023, and contained immediately. A forensic investigation concluded on January 11, 2024, revealing that data including names, SSNs, student IDs, education records, financial aid info, tax IDs, driver's licenses, financial account info, and health records were compromised. The college engaged cybersecurity experts and offered credit monitoring to affected individuals.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0013433ecc3d8912Vermont State AGfiled 2024-02-07(1d gap)Verified
- bd_440a249b2323b0c0Indiana State AGfiled 2024-02-07(1d gap)Verified
- bd_4ab94e513c0ebf6dMontana State AGfiled 2024-02-07(1d gap)Candidate
- bd_96ece187cc7fdefaMaine State AGfiled 2024-02-07(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-580737
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 8, 2024
- Raw hash
- 2501d7d3d2449f6042cfc97c67bcc6c6a9e3a78bd01a89ec80912afea59cd131
Reporting entity
- Name
- Connecticut Collegenorm: connecticut college
Victim entity
- Name
- Connecticut Collegenorm: connecticut college
Incident
- Discovered
- Mar 3, 2023
- Materiality determined
- —
- Notification sent
- Jan 11, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICEDUCATIONPII
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 49 weeks(342 days from discovery to filing)
- Compliance flags
- CA 60-day late · 314d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 3, 2023→ Notified: Jan 11, 2024314d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.