AccidentalEducationEducationMisdeliveryDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDHighResolved

Princeton University

bd_adfb38a8d099d07e · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 10, 2022

Filed

Jul 8, 2022

To disclose

28 days

Affected · nationwide

8,47032 in this filing

Linked

6 filings

Confidence

65%

Full breach record for Princeton University →3 incidents on file

Princeton University reported an inadvertent data disclosure that occurred on April 28, 2020, and was discovered on June 10, 2022. The breach affected 8,470 individuals, exposing their names and Social Security numbers. In response, the university offered two years of identity monitoring services through Kroll to the affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 10, 2022 → Filed with AG Jul 8, 202228d ✓ ME AG ≤30d28 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 773 days

discovery → filing · 28 days

Apr 28, 2020

Begins

Jun 10, 2022

Discovered

Jul 8, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

California State AGbd_ced3f5a433764e982022-07-08Verified
Massachusetts State AGbd_eacf93a470e8f2b12022-07-08Verified
Indiana State AGbd_024a4e9a86c6f9d72022-07-11 · +3dVerified
Montana State AGbd_513f9ba541db089c2022-07-11 · +3dVerified

Show 1 more filing ↓up to 10d gap

Maine State AGbd_22b3205bc6ac1e262022-06-28 · +10dCandidate

Name: Princeton University
norm: princeton university
Domain: princeton.edu

Name: Princeton University
norm: princeton university
Domain: princeton.edu
Industry: Educationllm

Discovered: Jun 10, 2022
Breach occurred: Apr 28, 2020
Undetected for: 773 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 11, 2022
Affected individuals: 8,470state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

During the incident: Sent written notification to affected individuals.
Engaged the services of Kroll to provide identity monitoring.
Changes made: Offered two years of identity monitoring services through Kroll.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: ME AG ≤30d · 28d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 10, 2022
→ Filed with AG: Jul 8, 2022
28d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 10, 2022 → Filed with AG: Jul 8, 2022	28d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Maine State AGJun 28 · first

California State AG+10d

Massachusetts State AG+10d

Maine State AG+10d · this page

Indiana State AG+13d

Montana State AG+13d

Pattern: first filing Jun 28 (ME), last Jul 11 (MT) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fdfbfdd8-6c5b-4e96-9050-4ca9b10c19dd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2022
Raw hash: 73b6805ecfa54dea0f2fe8aac21ce631348cd6bfe3e3c44f4b4836cca3352e7d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPrinceton University

Victim entityPrinceton University

Incidentdiscovered Jun 10, 2022

Stated responseSent written notification to affected individuals.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov