HackingEducationEducationCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_BASICLowResolved
Charleston School of Law
bd_d08b499ba0956576 · schema v1 · pii pii-v1
Full breach record for Charleston School of Law →Charleston School of Law (Charleston, SC) reported an external network breach to the Maine AG. An unauthorized party accessed the school's internal network between approximately January 15 and February 10, 2025; the breach was discovered on April 29, 2025. Files containing personal information of affected individuals were potentially accessed or acquired. Three Maine residents were affected. Notifications were sent May 29, 2025, with 12-month Experian IdentityWorks credit monitoring offered.
Maine clockDiscovered Apr 29, 2025 → Filed with AG May 30, 202531d ⏱ ME AG >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_ef2942f775fc7cf3Indiana State AGfiled 2025-05-29(1d gap)Verified
- bd_93ddd6ef6a982e58New Hampshire State AGfiled 2025-06-02(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8ea7381e-72cc-48d1-b961-9cba3481f9bf.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 30, 2025
- Raw hash
- a990065cde575d58d9335fc3030a2e0508c46f9b5bc13db0f4da175d7379b1d7
Reporting entity
- Name
- Charleston School of Lawnorm: charleston school of law
- Domain
- charlestonlaw.edu
- Industry
- Education
Victim entity
- Name
- Charleston School of Lawnorm: charleston school of law
- Domain
- charlestonlaw.edu
- Industry
- Education
- Industry
- Educationllm
Incident
- Discovered
- Apr 29, 2025
- Materiality determined
- Apr 29, 2025
- Notification sent
- May 29, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification filed
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- ME AG >30d · 31d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 29, 2025→ Filed with AG: May 30, 202531d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.