HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Mount Saint Mary College
bd_fa2020f491d598a5 · schema v1 · pii pii-v1
Full breach record for Mount Saint Mary College →Mount Saint Mary College, an educational institution, reported a data breach affecting 17,924 individuals. The incident, discovered on December 20, 2022, was described as an external system breach or hacking event. The compromised data included names and Social Security numbers. In response, the college provided written notification to affected individuals starting February 7, 2023, and offered 12 months of credit monitoring and identity theft recovery services through Cyberscout.
Maine clockDiscovered Dec 20, 2022 → Filed with AG Feb 9, 202351d ⏱ ME AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_71d734dae478fcceNew Hampshire State AGfiled 2023-02-08(1d gap)Verified
- bd_979e6ea0fe25e763Montana State AGfiled 2023-02-07(2d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ef70b6e2-6734-48aa-a691-4d46b327455e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 9, 2023
- Raw hash
- c67152841b14ac52bcb7ef9bf840a8a9cf4488df6b26559a6f586556b838588a
Reporting entity
- Name
- Mount Saint Mary Collegenorm: mount saint mary college
- Domain
- msmc.edu
Victim entity
- Name
- Mount Saint Mary Collegenorm: mount saint mary college
- Domain
- msmc.edu
Incident
- Discovered
- Dec 20, 2022
- Materiality determined
- —
- Notification sent
- Feb 7, 2023
- Affected individuals
- 17,924
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- ME AG >30d · 51d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 20, 2022→ Filed with AG: Feb 9, 202351d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.