DisclosureLens
HackingEducationEducationCustomer Data InvolvedIdentity (basic)Government IDHighResolved

Stratford University

bd_f0d826948a0727a4 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 29, 2022

Filed

Jan 26, 2023

To disclose

28 days

Affected · nationwide

78,69213 in this filing

Linked

6 filings

Confidence

50%
Full breach record for Stratford University →2 incidents on file

Stratford University reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on August 26, 2022. The breach was discovered on December 29, 2022. The personal information of 78,692 individuals was compromised, including 13 Maine residents. The compromised data includes names and Social Security numbers. Stratford University began notifying affected individuals on January 26, 2023, and offered 12 months of credit monitoring services through TransUnion.

Leak gap clock✗ Leak >180d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 125 days
discovery → filing · 28 days

Aug 26, 2022

Begins

Dec 29, 2022

Discovered

Jan 26, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident
A leak claim by revil about this victim predates this filing by 279 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
Vermont State AGJan 26 · first
Montana State AGJan 26 · first
Maine State AGJan 26 · first · this page
New Hampshire State AG+4d
Maine State AG+14d

Pattern: first filing Jan 26 (VT), last Feb 9 (ME) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.