HackingEducationEducationData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved

Monroe University

bd_f10742a4c40e8b04 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 13, 2026

To disclose

—

Affected

Not disclosed

Linked

9 filings

Confidence

73%

Full breach record for Monroe University →

Monroe University notified affected individuals of a data breach in which an unauthorized third party accessed certain Monroe computer systems between December 9 and December 23, 2024, acquiring copies of files containing personal information including names. The review of affected files concluded on September 30, 2025. Monroe offered one year of complimentary triple bureau credit monitoring through Cyberscout/TransUnion.

J jump to incidentP pin to compareR raw source

California clockConsumers notified Jan 2, 2026 → AG copy submitted Jan 13, 202611d ✓ CA AG copy ≤15d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Dec 9, 2024

Begins

Jan 13, 2026

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_4c3d62782fc9ce3c2026-01-13Verified
Vermont State AGbd_8541ce40d4fb8eb02026-01-13Verified
New Hampshire State AGbd_c0e0dce33b1b1a822026-01-13Verified
Maine State AGbd_d0b682aa9795a71d2026-01-13Verified

Show 4 more filings ↓up to 12d gap

Texas State AGbd_384cea3b31204b0d2026-01-14 · +1dVerified
Indiana State AGbd_48c6f366e27e27c22026-01-02 · +11dVerified
Nebraska State AGbd_9e8f2d35df646dda2026-01-02 · +11dVerified
Illinois State AGbd_d1febf4b59f4d6e12026-01-01 · +12dCandidate

Name: Monroe University
norm: monroe university

Name: Monroe University
norm: monroe university
Industry: Educationllm

Discovered: —
Breach occurred: Dec 9, 2024 – Dec 23, 2024
Materiality determined: —
Notification sent: Jan 2, 2026
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data Staged
Threat actor: External

During the incident: Promptly launched an investigation
Reviewed the contents of the involved files
Arranged for complimentary one-year membership of Triple Bureau Credit Monitoring services through Cyberscout, a TransUnion company
Changes made: Taking steps to reduce the risk of this type of incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: CA AG copy ≤15d · 11d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Consumers notified: Jan 2, 2026
→ AG copy submitted: Jan 13, 2026
11d 15 calendar days CA AG copy ≤15d

Statute	Window	Elapsed	Threshold	Status
California	Consumers notified: Jan 2, 2026 → AG copy submitted: Jan 13, 2026	11d	15 calendar days	CA AG copy ≤15d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+1d

Nebraska State AG+1d

Massachusetts State AG+12d

Vermont State AG+12d

New Hampshire State AG+12d

Maine State AG+12d

California State AG+12d · this page

Texas State AG+13d

Pattern: first filing Jan 1 (IL), last Jan 14 (TX) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-616960
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 13, 2026
Raw hash: e01ea2ceb58678192fb6bbb84cb23b342e9957f76df89047598e26da76aaf48a

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityMonroe University

Victim entityMonroe University

IncidentUnauthorized Access

Stated responsePromptly launched an investigation

ComplianceCA AG copy ≤15d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov