MalwareRansomwareData EncryptedDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTCritical
Cornish College of the Arts
bd_fb30b45e0dc7f961 · schema v1 · pii pii-v1
Full breach record for Cornish College of the Arts →Cornish College of the Arts reported a ransomware attack that occurred between June 6, 2021, and June 10, 2021. The breach was discovered on April 4, 2022. The incident affected 199,449 individuals, compromising their names and Social Security numbers. The college provided 12 months of identity theft protection services through Experian to those affected.
Maine clockDiscovered Apr 4, 2022 → Filed with AG May 6, 202232d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_020708122f53f393Washington State AGfiled 2022-05-06Candidate
- bd_7fb26e03c9c07018California State AGfiled 2022-05-06Verified
- bd_9b3f4f6dd0589853New Hampshire State AGfiled 2022-05-12(6d gap)Verified
- bd_e2d9c81ab16bf4c9Oregon State AGfiled 2022-05-23(17d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f11d0b34-fda7-4e74-b2d7-a742834b61a0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2022
- Raw hash
- 26e7cb4a992a861d102a45889e4742ca96197f5c7d692322953172ccd1271c3d
Reporting entity
- Name
- Cornish College of the Artsnorm: cornish college of the arts
Victim entity
- Name
- Cornish College of the Artsnorm: cornish college of the arts
Incident
- Discovered
- Apr 4, 2022
- Materiality determined
- —
- Notification sent
- May 6, 2022
- Affected individuals
- 199,449
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 4, 2022→ Filed with AG: May 6, 202232d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.