HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Hathaway Brown School
bd_bdb4a74ef8adcb82 · schema v1 · pii pii-v1
Full breach record for Hathaway Brown School →Hathaway Brown School, an educational institution in Ohio, experienced an external system breach between February 7, 2020, and May 20, 2020. The incident was discovered on October 14, 2020. The breach compromised the names and Social Security Numbers of 1,790 individuals, including one Maine resident. The school provided written notification on November 13, 2020, and offered 24 months of complimentary credit monitoring through Cyberscout.
Maine clockDiscovered Oct 14, 2020 → Filed with AG Nov 19, 202036d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,790 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/08cfdfa2-c2ab-4a2b-a7bd-d89b7a49318e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2020
- Raw hash
- e572f82b44c7575ca6665f6e5c93b68190349fcb3b44bf14552e592f0ee0cf3f
Reporting entity
- Name
- Hathaway Brown Schoolnorm: hathaway brown school
Victim entity
- Name
- Hathaway Brown Schoolnorm: hathaway brown school
Incident
- Discovered
- Oct 14, 2020
- Materiality determined
- —
- Notification sent
- Nov 13, 2020
- Affected individuals
- 1,790
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- ME AG >30d · 36d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 14, 2020→ Filed with AG: Nov 19, 202036d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.