HackingEducationEducationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Albion College

bd_c94d602bc101c6a3 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Dec 17, 2024

Filed

May 1, 2025

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

66%

Full breach record for Albion College →

Albion College experienced unauthorized network access on December 17, 2024. The investigation concluded April 18, 2025, revealing that full names and other personal identifiers were exfiltrated. The College engaged outside cybersecurity professionals and offered one year of Equifax Credit Watch Gold to affected individuals. No identity fraud has been reported to date.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

Dec 17, 2024

Begins

Dec 17, 2024

Discovered

May 1, 2025

Filed

This filing is one of 8 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 135 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitemedusabd_6ae4bfa3cd6e2ae42024-12-23 · +128dVerified by operator
Leak Sitemedusabd_342ac06b15b44fdf2024-12-17 · +135dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_03211ef4625d44f52025-05-01Verified by operator
Indiana State AGbd_7cca37b7de16e3a02025-05-01Verified
Maine State AGbd_ba6082db2152b9712025-05-01Verified
Washington State AGbd_58e51e667502f6e52025-04-30 · +1dVerified by operator

Show 1 more filing ↓up to 4d gap

New Hampshire State AGbd_c9a7db1480ccd80a2025-05-05 · +4dVerified

Name: Albion College
norm: albion college

Name: Albion College
norm: albion college
Industry: Educationllm

Discovered: Dec 17, 2024
Breach occurred: Dec 17, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Offering a complimentary one-year membership in Equifax Credit Watch Gold
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Washington State AGApr 30 · first

Massachusetts State AG+1d

Indiana State AG+1d

Maine State AG+1d

Nebraska State AG+1d · this page

New Hampshire State AG+5d

Pattern: first filing Apr 30 (WA), last May 5 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/3aad4186-e623-4480-ae40-dfbf1bd64030.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 1, 2025
Raw hash: 7c9c61789f49f62725d8ad24b42686339a77ad96a7b71ff416b713398693b47b

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityAlbion College

Victim entityAlbion College

Incidentdiscovered Dec 17, 2024

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov