Grinnell College

Grinnell College reported a data breach to the Montana Attorney General. The breach was reported on 2023-09-29. The breach occurred from 5/4/2023 to 5/7/2023. 2 Montana residents were affected.

Grinnell College disclosed that an employee inadvertently moved payroll files to a shared internal folder accessible by any user with credentials. The files contained names, addresses, SSNs, and salary/tax info. No external access or misuse was detected. The incident was contained on the day of discovery (May 7, 2023), and affected individuals were offered credit monitoring.

Grinnell College reported an inadvertent disclosure of personal information, including Social Security Numbers, affecting 2,319 individuals (6 in Maine). The breach occurred on March 13, 2023, and was discovered on May 7, 2023. Notification was sent on September 29, 2023, offering 12 months of Experian IdentityWorks.

Grinnell College, a education sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2020-09-29 and filed notice on 2021-01-05. 2,465 Washington residents were affected. 98 days elapsed between awareness and notification. 235 days to identify the breach. 0 days to contain the breach.

Grinnell College reported a data breach to the Montana Attorney General. The breach was reported on 2019-03-25. The breach occurred on 3/7/2019. 9 Montana residents were affected.