HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Alliance College-Ready Public Schools
bd_f95cd28f9d43e431 · schema v1 · pii pii-v1
Full breach record for Alliance College-Ready Public Schools →Alliance College Ready Public Schools experienced an external system breach (hacking) on September 16, 2023. The incident affected 8,793 individuals, including one Maine resident. The breach compromised names and driver's license numbers. The entity notified affected individuals in writing on February 2, 2024, and provided 12 months of TransUnion credit monitoring and identity theft recovery services.
Maine clockDiscovered Sep 16, 2023 → Filed with AG Mar 2, 2024168d ✗ ME AG >90d24 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by dispossessor about this victim predates this filing by 173 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_acb0cc2ab81fab37New Hampshire State AGfiled 2024-02-22(9d gap)Verified
- bd_c76c7b22e8387f27Montana State AGfiled 2024-02-22(9d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/203d380a-a931-4cff-b8d2-75f95a7ee77c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 2, 2024
- Raw hash
- 0d9a33c4b4e420953e01de00bd5ba342b2094d179e21a1d8c13202e986e7a20c
Reporting entity
- Name
- Alliance College-Ready Public Schoolsnorm: alliance college ready public schools
- Domain
- laalliance.org
Victim entity
- Name
- Alliance College-Ready Public Schoolsnorm: alliance college ready public schools
- Domain
- laalliance.org
Incident
- Discovered
- Sep 16, 2023
- Materiality determined
- —
- Notification sent
- Feb 2, 2024
- Affected individuals
- 8,793
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 weeks(168 days from discovery to filing)
- Compliance flags
- ME AG >90d · 168dME resident >60d · 139dLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 16, 2023→ Filed with AG: Mar 2, 2024168d 90 days ME AG >90d Maine Discovered: Sep 16, 2023→ Notified: Feb 2, 2024139d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.