HackingEducationEducationCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

Smith College

bd_d04e1b43980d4d17 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 10, 2021

Filed

Sep 17, 2021

To disclose

7 days

Affected

1state residents only

Confidence

50%

Full breach record for Smith College →3 incidents on file

An external system breach at Smith College, discovered on September 10, 2021, occurred between July 27, 2021, and August 4, 2021. The breach affected one Maine resident, compromising their name in combination with financial account or card numbers and access codes. Written notification was sent to the affected individual on September 17, 2021.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 10, 2021 → Filed with AG Sep 17, 20217d ✓ ME AG ≤30d7 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 45 days

discovery → filing · 7 days

Jul 27, 2021

Begins

Sep 10, 2021

Discovered

Sep 17, 2021

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Smith College
norm: smith college

Name: Smith College
norm: smith college
Industry: Educationllm

Discovered: Sep 10, 2021
Breach occurred: Jul 27, 2021 – Aug 4, 2021
Undetected for: 45 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 17, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: External

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: ME AG ≤30d · 7d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 10, 2021
→ Filed with AG: Sep 17, 2021
7d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 10, 2021 → Filed with AG: Sep 17, 2021	7d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/97803617-db2f-4f9e-b750-0d3ee732898e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 17, 2021
Raw hash: 857082b625e8af7f9f60a5f78c2658c121b6a695f26c792c376f82d45eb2d7cc

Reporting entitySmith College

Victim entitySmith College

Incidentdiscovered Sep 10, 2021

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov