HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICPIIHighContained
Marymount
bd_eca2904e9c4a7438 · schema v1 · pii pii-v1
Full breach record for Marymount →Marymount Manhattan College notified individuals of a data security incident where an unknown actor gained unauthorized access to the network. The breach occurred on November 9, 2021, and was discovered on November 12, 2021. Personal information including names and variable data for 191,581 individuals was potentially accessed. The College engaged cybersecurity experts, secured the network, reported to the FBI, and offered credit monitoring services.
California clockDiscovered Nov 12, 2021 → Notified Aug 3, 2022264d ✗ CA 60-day late38 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_2834d42f9f35cecdOregon State AGfiled 2022-08-03Verified by operator
- bd_2f79fd085919e80fWashington State AGfiled 2022-08-03Verified
- bd_6ca5c664e228016aMaine State AGfiled 2022-08-03Verified by operator
- bd_a908f58626ff956cMontana State AGfiled 2022-08-03Verified
Show 2 more filings ↓Show fewer ↑up to 5d gap
- bd_e0aca274db9d116fDelaware State AGfiled 2022-08-03Verified
- bd_306f7347da1c40a4Delaware State AGfiled 2022-07-29(5d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-555940
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2022
- Raw hash
- d1a93035697e7e76a3ce4fc8fe5bb60ca3b742585c0a72414a31526f731f0030
Reporting entity
- Name
- Marymountnorm: marymount
Victim entity
- Name
- Marymountnorm: marymount
Incident
- Discovered
- Nov 12, 2021
- Materiality determined
- —
- Notification sent
- Aug 3, 2022
- Affected individuals
- 191,581
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to the Federal Bureau of Investigation
Compliance
- Time to disclose
- 38 weeks(264 days from discovery to filing)
- Compliance flags
- CA 60-day late · 264dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 12, 2021→ Notified: Aug 3, 2022264d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.