DisclosureLens
HackingEducationEducationCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumContained

Elizabeth City State University

bd_ec243ea5e789a925 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 18, 2021

Filed

Mar 26, 2021

To disclose

5 weeks

Affected · nationwide

29,1276 in this filing

Linked

4 filings

Confidence

50%
Full breach record for Elizabeth City State University

Elizabeth City State University, an educational institution, reported a data breach that occurred between August 27, 2020, and September 13, 2020. The breach, discovered on February 18, 2021, was described as an external system breach (hacking). The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers, along with their security codes, access codes, passwords, or PINs. A total of 29,127 individuals were affected, including 6 residents of Maine. The university began notifying affected consumers in writing on March 26, 2021, and offered one year of credit monitoring and identity theft protection services through Experian.

Maine clockDiscovered Feb 18, 2021Filed with AG Mar 26, 202136d ME AG >30d5 weeks discovery → filing
unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 175 days
discovery → filing · 5 weeks / 36 days

Aug 27, 2020

Begins

Feb 18, 2021

Discovered

Mar 26, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Massachusetts State AGMar 26 · first
New Hampshire State AGMar 26 · first
Indiana State AGMar 26 · first
Maine State AGMar 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.