DisclosureLens
HackingEducationEducationSQL InjectionCustomer Data InvolvedGovernment IDCriticalResolved

Hope College

bd_eb82ec013c31afe8 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Nov 8, 2022

Filed

Dec 16, 2022

To disclose

5 weeks

Affected · nationwide

156,713191 in this filing

Linked

8 filings

Confidence

50%
Full breach record for Hope College

Hope College, an educational institution, reported a data breach impacting 191 Maine residents. The breach resulted from an SQL injection attack on September 27, 2022, which was discovered on November 8, 2022. The compromised information included names along with driver's license or non-driver identification card numbers. In response, the college began notifying affected individuals on December 15, 2022, and offered 12 months of credit monitoring services through CyberScout.

Maine clockDiscovered Nov 8, 2022Filed with AG Dec 16, 202238d ME AG >30d5 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 42 days
discovery → filing · 5 weeks / 38 days

Sep 27, 2022

Begins

Nov 8, 2022

Discovered

Dec 16, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 4d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗

Pattern: first filing Dec 15 (IN), last Dec 20 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.