HackingIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Carnegie Mellon University
bd_e5516b04777ac61c · schema v1 · pii pii-v1
Full breach record for Carnegie Mellon University →Carnegie Mellon University reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on August 24, 2023. The breach was discovered on December 4, 2023, and affected 24 Maine residents. The compromised information includes names and Social Security Numbers. In response, the university is offering two years of identity theft protection and credit monitoring services through Experian.
Maine clockDiscovered Dec 4, 2023 → Filed with AG Jan 12, 202439d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4b400de4cd0922bfCalifornia State AGfiled 2024-01-12Verified
- bd_a73a836d2c2f9a93Indiana State AGfiled 2024-01-12Verified
- bd_d7e9b0ee37521eacVermont State AGfiled 2024-01-12Verified
- bd_fa71a693bd407756Montana State AGfiled 2024-01-12Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a3149073-c145-4b26-ae92-a062ca803d41.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2024
- Raw hash
- 05d955bb4f9d8e00c0fb216cc6b116e0a191f9ec29734c26a72105897aa820f6
Reporting entity
- Name
- Carnegie Mellon Universitynorm: carnegie mellon university
- Industry
- Education
Victim entity
- Name
- Carnegie Mellon Universitynorm: carnegie mellon university
- Industry
- Education
Incident
- Discovered
- Dec 4, 2023
- Materiality determined
- —
- Notification sent
- Jan 12, 2024
- Affected individuals
- 24
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- ME AG >30d · 39d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 4, 2023→ Filed with AG: Jan 12, 202439d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.