DisclosureLens
HackingEducationEducationCustomer Data InvolvedIdentity (basic)Financial accountHighContained

Cincinnati State Technical Community College

bd_d8596b84c7cb5c4e · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 15, 2022

Filed

Dec 23, 2022

To disclose

5 weeks

Affected · nationwide

408,18987 in this filing

Linked

7 filings

Confidence

50%
Full breach record for Cincinnati State Technical Community College →2 incidents on file

Cincinnati State Technical Community College reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred between October 30, 2022, and November 2, 2022. The breach was discovered on November 15, 2022. The incident affected 87 Maine residents and involved the acquisition of names or other personal identifiers in combination with financial account numbers or credit/debit card numbers. The college provided written notification to affected consumers on December 23, 2022, and offered 12 months of identity theft protection services through TransUnion.

Maine clockDiscovered Nov 15, 2022 → Filed with AG Dec 23, 202238d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 16 days
discovery → filing · 5 weeks / 38 days

Oct 30, 2022

Begins

Nov 15, 2022

Discovered

Dec 23, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 4d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGDec 23 · first
California State AGDec 23 · first
Massachusetts State AGDec 23 · first
Indiana State AGDec 23 · first
Maine State AGDec 23 · first · this page
New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.