HackingEducationEducationDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDHigh

The Research Foundation for The State University of New York

bd_ce26715c6b70a3c9 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 19, 2021

Filed

Nov 12, 2021

To disclose

24 days

Affected · nationwide

4,2939 in this filing

Linked

7 filings

Confidence

65%

Full breach record for The Research Foundation for The State University of New York →3 incidents on file

The Research Foundation for the State University of New York reported a data breach affecting 4,293 individuals. The breach, which occurred between May 22, 2021, and July 9, 2021, was discovered on October 19, 2021. An external actor gained unauthorized access to systems, compromising names and Social Security numbers. The foundation notified affected individuals on November 12, 2021, and offered one year of credit monitoring and identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 19, 2021 → Filed with AG Nov 12, 202124d ✓ ME AG ≤30d24 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 150 days

discovery → filing · 24 days

May 22, 2021

Begins

Oct 19, 2021

Discovered

Nov 12, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_35345d340277dc152021-11-12Verified
California State AGbd_5f75759e89d7c8d62021-08-13 · +91dCandidate
Massachusetts State AGbd_75df636bcc243c002021-08-13 · +91dVerified
Montana State AGbd_9962a7013e8651682021-08-13 · +91dVerified

Show 2 more filings ↓up to 91d gap

Maine State AGbd_de5c6df8faf879912021-08-13 · +91dVerified
Indiana State AGbd_e211e77269ed7d472021-08-13 · +91dVerified

Name: The Research Foundation for The State University of New York
norm: the research foundation for the state university of new york
Domain: rfsuny.org

Name: The Research Foundation for The State University of New York
norm: the research foundation for the state university of new york
Domain: rfsuny.org
Industry: Educationllm

Discovered: Oct 19, 2021
Breach occurred: May 22, 2021 – Jul 9, 2021
Undetected for: 150 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 12, 2021
Affected individuals: 4,293state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered one year of credit monitoring and identity theft protection services through Experian.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: ME AG ≤30d · 24d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 19, 2021
→ Filed with AG: Nov 12, 2021
24d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 19, 2021 → Filed with AG: Nov 12, 2021	24d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

California State AGAug 13 · first

Massachusetts State AGAug 13 · first

Montana State AGAug 13 · first

Maine State AGAug 13 · first

Indiana State AGAug 13 · first

New Hampshire State AG+91d

Maine State AG+91d · this page

Pattern: first filing Aug 13 (CA), last Nov 12 (ME) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d7abb4c3-a7bd-42d5-a525-458cf53b44e6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2021
Raw hash: f139ca59fa7b82978e65b731fcd8b9346bba644fe11715e2237f99fdd75b92d5

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityThe Research Foundation for The State University of New York

Victim entityThe Research Foundation for The State University of New York

Incidentdiscovered Oct 19, 2021

Stated responseOffered one year of credit monitoring and identity theft protection services through Experian.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov