Green Mountain Higher Education Consortium reported a data breach to the Montana Attorney General. The breach was reported on 2025-10-28. The breach occurred from 10/30/2024 to 11/20/2024. 7 Montana residents were affected.
Clustered 5 filings across 5 jurisdictions · filing window Oct 28, 2025 → Oct 29, 2025. View entity profile → Other incidents for this victim →
incident inc_019401e3bf1749da · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
IN ME MT NH VT
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Oct 30, 2024
When the intrusion reportedly occurred, per the linked filings
Nov 19, 2024
Reported by MAINE AG, NEW HAMPSHIRE AG, VERMONT AG filings
Green Mountain Higher Education Consortium reported a data breach to the Montana Attorney General. The breach was reported on 2025-10-28. The breach occurred from 10/30/2024 to 11/20/2024. 7 Montana residents were affected.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 7
Green Mountain Higher Education Consortium (GMHEC), an education consortium in Shelburne, VT, discovered suspicious activity in its email environment on November 19, 2024. An unauthorized actor accessed or acquired data from two employee email accounts between October 30 and November 20, 2024. Personal information (names and other PII) of 3,184 individuals (37 Maine residents) was involved. Notifications were sent October 29, 2025. Credit monitoring via TransUnion/Cyberscout was offered.
Affected (this filing): 37
Green Mountain Higher Education Consortium (GMHEC) notified the NH AG of a breach affecting 57 NH residents. Unauthorized access to two employee email accounts occurred Oct 30–Nov 20, 2024. Data included names, SSNs, and health info. GMHEC engaged forensic firm CFC Response, secured email, and offered 12 months of credit monitoring via TransUnion.
Affected (this filing): 57
Green Mountain Higher Education Consortium notified consumers of a data breach involving unauthorized access to two employee email accounts between Oct 30 and Nov 20, 2024. The incident exposed names and other personal information. The consortium engaged forensic investigators, secured the email environment, and offered credit monitoring services.
Green Mountain Higher Education Consortium reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-30 and was reported on 2025-10-29. 13 Indiana residents were affected. 3,148 individuals affected in total.
Affected (this filing): 3,148