Clustered 5 filings across 5 jurisdictions · filed Mar 22, 2024. View entity profile → Other incidents for this victim →
incident inc_53a2f152f2094499 · merge_method llm · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Identity (basic) · Financial account
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA IN ME MT VT
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Mar 3, 2023
When the intrusion reportedly occurred, per the linked filings
Mar 3, 2023
Reported by CALIFORNIA AG filing
Feb 24, 2024
Reported by MAINE AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Lewis and Clark College reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-03 and was reported on 2024-03-22. 91 Indiana residents were affected. 48,799 individuals affected in total.
Affected (this filing): 48,799
Lewis and Clark College reported a data breach to the Maine Attorney General, affecting 110 Maine residents. The breach, which occurred on March 3, 2023, and was discovered on February 24, 2024, was described as an external system breach or hacking incident. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their associated security codes or PINs. The college began notifying affected individuals on March 22, 2024, and is offering 12 months of credit monitoring and identity theft protection services through CyberScout via TransUnion.
Affected (this filing): 110
Lewis and Clark College reported a data breach to the Montana Attorney General. The breach was reported on 2024-03-22. The breach occurred on 3/3/2023. 227 Montana residents were affected.
Affected (this filing): 227
Lewis and Clark College notified consumers of a data breach impacting personal information. The notice, filed with the Vermont Attorney General on March 22, 2024, specifically identifies 25 Rhode Island residents as affected. Data types impacted include identity basic and government identifiers. The notice provides standard identity theft prevention resources, including fraud alerts, security freezes, and credit monitoring guidance.
Affected (this filing): 25
Lewis and Clark College detected unauthorized access to its network on March 3, 2023. Investigation determined bad actors took data on or about February 28, 2023. On February 24, 2024, the college determined impacted files contained personal information. The college engaged external cybersecurity professionals, secured the network, and is providing complimentary identity theft protection services. No specific data types were listed in the redacted notice, but PII is implied.