PhysicalTheftCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Art Center Inc
bd_fb06400ad7c2b40b · schema v1 · pii pii-v1
Full breach record for Art Center Inc →Art Center Inc. (dba Northwest College of Art & Design) reported the loss or theft of a device containing personal information of 1,252 individuals, including 1 Maine resident. The breach occurred on October 27, 2022, and was discovered on March 8, 2023. Affected data included names and financial account numbers. The entity provided 12 months of credit monitoring through IDX.
Maine clockDiscovered Mar 8, 2023 → Filed with AG Mar 14, 20236d ✓ ME AG ≤30d6 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_838fd36d50dea150Vermont State AGfiled 2023-03-14Verified
- bd_a0efd411b5276ee8Washington State AGfiled 2023-03-14Candidate
- bd_f67551089d8e7b7cMontana State AGfiled 2023-03-14Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/545aea50-cf5b-4e86-885c-7325ea8b39ec.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 14, 2023
- Raw hash
- fa0a67d375f056f7b2db602932efe5906c7cb12465e2c780cb57d1d2d2644bd8
Reporting entity
- Name
- Art Center Incnorm: art center
- Industry
- Education
Victim entity
- Name
- Art Center Incnorm: art center
- Industry
- Education
Incident
- Discovered
- Mar 8, 2023
- Materiality determined
- —
- Notification sent
- Mar 14, 2023
- Affected individuals
- 1,252
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- removable_media
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 6d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 8, 2023→ Filed with AG: Mar 14, 20236d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.