HackingEducationEducationCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMedium

PROCTOR ACADEMY

bd_c229aa6ab88c0a94 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2020

Filed

Nov 19, 2020

To disclose

7 weeks

Affected · nationwide

69122 in this filing

Linked

4 filings

Confidence

66%

Full breach record for PROCTOR ACADEMY →

Proctor Academy, an educational institution, reported an external system breach that occurred on June 1, 2020, and was discovered on September 29, 2020. The breach affected 691 individuals, compromising names and Social Security Numbers. Affected individuals were notified on November 7, 2020, and offered identity theft protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 29, 2020 → Filed with AG Nov 19, 202051d ⏱ ME AG >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 120 days

discovery → filing · 7 weeks / 51 days

Jun 1, 2020

Begins

Sep 29, 2020

Discovered

Nov 19, 2020

Filed

This filing is one of 4 filings about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_2b83e80dfcb435742020-11-19Verified
New Hampshire State AGbd_ad7d50ea1e4361e52020-11-23 · +4dVerified
Montana State AGbd_ed76bd7d19e398112020-11-06 · +13dVerified by operator

Name: MCLANE MIDDLETON, PROFESSIONAL ASSOCIATION
norm: mclane middleton professional

Name: PROCTOR ACADEMY
norm: proctor academy
Industry: Educationllm

Discovered: Sep 29, 2020
Breach occurred: Jun 1, 2020
Undetected for: 120 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 7, 2020
Affected individuals: 691state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered identity theft protection services from Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: ME AG >30d · 51d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 29, 2020
→ Filed with AG: Nov 19, 2020
51d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 29, 2020 → Filed with AG: Nov 19, 2020	51d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGNov 6 · first

Massachusetts State AG+13d

Maine State AG+13d · this page

New Hampshire State AG+17d

Pattern: first filing Nov 6 (MT), last Nov 23 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e8b928d9-026b-482c-b2c3-bc605204adec.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 19, 2020
Raw hash: 6d463a755a9e6c70df490b1f471c061c90b275e14d24f0d41bc7c73390cf7c0b

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMCLANE MIDDLETON, PROFESSIONAL ASSOCIATION

Victim entityPROCTOR ACADEMY

Incidentdiscovered Sep 29, 2020

Stated responseOffered identity theft protection services from Experian IdentityWorks

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov