HackingEducationEducationCustomer Data InvolvedPIIIdentity (basic)CriticalContained

Lansing Community College

bd_bacb52a2a9fa8d0e · schema v1 · pii pii-v1

Severity

Critical

Discovered

Feb 18, 2025

Filed

Jun 5, 2026

To disclose

16 months

Affected · nationwide

174,30731 in this filing

Linked

3 filings

Confidence

65%

Full breach record for Lansing Community College →2 incidents on file

Lansing Community College reported an external system breach (hacking) occurring on February 12, 2025, discovered on February 18, 2025. The incident affected 174,307 individuals, including 31 Maine residents. The college notified affected individuals in writing on June 5, 2026, and provided 24 months of credit monitoring services through Epiq-Privacy Solutions.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 18, 2025 → Filed with AG Jun 5, 2026472d ✗ ME AG >90d16 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 6 days

discovery → filing · 16 months / 472 days

Feb 12, 2025

Begins

Feb 18, 2025

Discovered

Jun 5, 2026

Filed

vs. sector median

+59 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_7bbc517f5ca12be82026-06-05Candidate
Indiana State AGbd_472df62a64a3e56f2026-06-19 · +14dVerified

Name: Lansing Community College
norm: lansing community college
Domain: lcc.edu
Industry: education

Name: Lansing Community College
norm: lansing community college
Domain: lcc.edu
Industry: education
Industry: Educationllm

Discovered: Feb 18, 2025
Breach occurred: Feb 12, 2025
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 5, 2026
Affected individuals: 174,307state + nationwide
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed data breach notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Sent written notification to affected individuals
Offered 24 months Epiq-Privacy Solutions ID 1B Credit Monitoring - Basic
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 months(472 days from discovery to filing)
Compliance flags: ME AG >90d · 472dME resident >180d · 472d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 18, 2025
→ Filed with AG: Jun 5, 2026
472d 90 days ME AG >90d
Maine
Discovered: Feb 18, 2025
→ Notified: Jun 5, 2026
472d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 18, 2025 → Filed with AG: Jun 5, 2026	472d	90 days	ME AG >90d
Maine	Discovered: Feb 18, 2025 → Notified: Jun 5, 2026	472d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGJun 5 · first

Maine State AGJun 5 · first · this page

Indiana State AG+14d

Pattern: first filing Jun 5 (CA), last Jun 19 (IN) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1d026f2f-25f5-4ff8-b64e-dd5d0a974cf0.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 5, 2026
Raw hash: 2aee29e7a260fc99a92ddcb0a6c9a858421ad1994c08c4505ae4d5289c1d374d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLansing Community College

Victim entityLansing Community College

Incidentdiscovered Feb 18, 2025

Stated responseSent written notification to affected individuals

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov