HackingEducationEducationCustomer Data InvolvedIdentity (basic)Government IDMedium

Jersey College

bd_ba615d1a5f737601 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 29, 2023

Filed

Dec 6, 2023

To disclose

7 days

Affected

4scope not determined

Linked

5 filings

Confidence

75%

Full breach record for Jersey College →

Jersey College, an educational institution, reported an external system breach that occurred between January 11, 2023, and January 25, 2023. The breach was discovered on November 29, 2023, and affected four Maine residents. The compromised information included names and Social Security numbers. In response, Jersey College offered affected individuals a 12-month membership with IDX for credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 29, 2023 → Filed with AG Dec 6, 20237d ✓ ME AG ≤30d7 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 322 days

discovery → filing · 7 days

Jan 11, 2023

Begins

Nov 29, 2023

Discovered

Dec 6, 2023

Filed

vs. sector median

8 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelosttrustbd_11ffd2b985a275ce2023-09-26 · +71dVerified by operator

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_a70cb89df88295942023-12-06Verified
Montana State AGbd_cdcb2ab7592342032023-12-06Verified by operator
Massachusetts State AGbd_5fbdfdb50bb436542023-12-08 · +2dVerified by operator

Name: Jersey College
norm: jersey college

Name: Jersey College
norm: jersey college
Industry: Educationllm

Discovered: Nov 29, 2023
Breach occurred: Jan 11, 2023 – Jan 25, 2023
Undetected for: 322 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 5, 2023
Affected individuals: 4scope not determined
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services through IDX.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: ME AG ≤30d · 7d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 29, 2023
→ Filed with AG: Dec 6, 2023
7d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 29, 2023 → Filed with AG: Dec 6, 2023	7d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGDec 6 · first

Montana State AGDec 6 · first

Maine State AGDec 6 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b413241c-b7b9-4007-aa46-dd42c5539131.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 6, 2023
Raw hash: fd7ff738dbbf5d7309180743f0bd50c670c5b02d5ea2e1cd55bc3e2e3aadf4ae

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityJersey College

Victim entityJersey College

Incidentdiscovered Nov 29, 2023

Stated responseOffered 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services through IDX.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov