HackingEducationEducationCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumContained

YESHIVA UNIVERSITY

bd_f97b642bd0311ddd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 6, 2021

Filed

Apr 12, 2021

To disclose

6 days

Affected · nationwide

3,3807 in this filing

Linked

5 filings

Confidence

50%

Full breach record for YESHIVA UNIVERSITY →4 incidents on file

Yeshiva University, an educational institution, experienced an external system breach (hacking) that occurred from December 21, 2020, to December 23, 2020. The breach was discovered on April 6, 2021. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their associated security codes, access codes, passwords, or PINs. A total of 3,380 individuals were affected, including 7 residents of Maine. Affected individuals were notified on April 12, 2021, and offered one year of credit monitoring and identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Apr 6, 2021 → Filed with AG Apr 12, 20216d ✓ ME AG ≤30d6 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 106 days

discovery → filing · 6 days

Dec 21, 2020

Begins

Apr 6, 2021

Discovered

Apr 12, 2021

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_247fd2280928f77a2021-04-12Verified
Montana State AGbd_33cff4e471c3dd412021-04-12Candidate
Indiana State AGbd_4194538bb1be615b2021-04-12Verified
New Hampshire State AGbd_e96f0c71b1036eca2021-04-12Verified

Name: YESHIVA UNIVERSITY
norm: yeshiva university

Name: YESHIVA UNIVERSITY
norm: yeshiva university
Industry: Educationllm

Discovered: Apr 6, 2021
Breach occurred: Dec 21, 2020 – Dec 23, 2020
Undetected for: 106 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 12, 2021
Affected individuals: 3,380state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered one year of free credit monitoring and identity theft protection services through Experian.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: ME AG ≤30d · 6d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 6, 2021
→ Filed with AG: Apr 12, 2021
6d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 6, 2021 → Filed with AG: Apr 12, 2021	6d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGApr 12 · first

Montana State AGApr 12 · first

Indiana State AGApr 12 · first

New Hampshire State AGApr 12 · first

Maine State AGApr 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6ced4274-2e74-48a5-aa6e-3162c4cf6107.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2021
Raw hash: 79626e9c2a42f9f9a0796bf0ba68be2ad61e77a37ea53f52a5779758f5880397

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityYESHIVA UNIVERSITY

Victim entityYESHIVA UNIVERSITY

Incidentdiscovered Apr 6, 2021

Stated responseOffered one year of free credit monitoring and identity theft protection services through Experian.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov