HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Varsity Tutors LLC
bd_e423db69abbd12bb · schema v1 · pii pii-v1
Full breach record for Varsity Tutors LLC →Varsity Tutors LLC reported a breach occurring between Nov 1-6, 2021, discovered on May 11, 2022. Approximately 24,421 individuals were affected, including 19 Maine residents. The incident involved unauthorized access resulting in the acquisition of names and driver's license numbers. Varsity Tutors notified consumers on June 3, 2022, and provided 12 months of credit monitoring and identity restoration services via Equifax.
Maine clockDiscovered May 11, 2022 → Filed with AG Jun 3, 202223d ✓ ME AG ≤30d23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_13a8de957b4ea2e5California State AGfiled 2022-06-03Candidate
- bd_3974dd33e60b4d4bWashington State AGfiled 2022-06-03Verified
- bd_601e2d05841b7b9eMontana State AGfiled 2022-06-03Verified
- bd_81d4e565c2e253eaOregon State AGfiled 2022-06-03Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0020a474-5fec-4672-9ea9-5d3f00b04e9b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2022
- Raw hash
- 444a80e0fef2d17d7456264112839d231cbe98d57ba4db76ee64dccdd56ba4e7
Reporting entity
- Name
- Varsity Tutors LLCnorm: varsity tutors
- Domain
- varsitytutors.com
Victim entity
- Name
- Varsity Tutors LLCnorm: varsity tutors
- Domain
- varsitytutors.com
Incident
- Discovered
- May 11, 2022
- Materiality determined
- —
- Notification sent
- Jun 3, 2022
- Affected individuals
- 24,421
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 23d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 11, 2022→ Filed with AG: Jun 3, 202223d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.