MalwareRansomwareSupply Chain (3P Vendor)Ransom DemandedData EncryptedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
Wichita Collegiate School
bd_e20a2f0ed78ed7c6 · schema v1 · pii pii-v1
Full breach record for Wichita Collegiate School →Wichita Collegiate School reported a data breach impacting 2,140 individuals due to a ransomware attack on a third-party vendor. The incident occurred between February 7, 2020, and May 20, 2020, and was discovered on October 2, 2020. The compromised information included names and financial account or credit/debit card numbers with their associated security codes or PINs. The school began notifying affected individuals on December 21, 2020, and offered 24 months of credit monitoring and identity restoration services.
Maine clockDiscovered Oct 2, 2020 → Filed with AG Dec 21, 202080d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,140 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dc635603-309b-4599-81af-1268ead4413d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2020
- Raw hash
- 3ef308ec5a331bc477d52322fa50ad7dc97e8ec69be6f789b63c104fb5fda5e4
Reporting entity
- Name
- Wichita Collegiate Schoolnorm: wichita collegiate school
Victim entity
- Name
- Wichita Collegiate Schoolnorm: wichita collegiate school
Incident
- Discovered
- Oct 2, 2020
- Materiality determined
- —
- Notification sent
- Dec 21, 2020
- Affected individuals
- 2,140
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 11 weeks(80 days from discovery to filing)
- Compliance flags
- ME AG >30d · 80dME resident >60d · 80d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 2, 2020→ Filed with AG: Dec 21, 202080d 30 days (soft) ME AG >30d Maine Discovered: Oct 2, 2020→ Notified: Dec 21, 202080d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.