Clustered 4 filings across 4 jurisdictions · filing window Feb 17, 2023 → Mar 11, 2024. View entity profile → Other incidents for this victim →
incident inc_a52788fb922447ee · merge_method human · confidence 100%
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
CA ME MT
Leak Site · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Dec 5, 2022
When the intrusion reportedly occurred, per the linked filings
Stanford University reported a data breach to the Montana Attorney General. The breach was reported on 2023-02-17. The breach occurred from 12/5/2022 to 1/24/2023. 3 Montana residents were affected.
Affected (this filing): 3
Sep 27, 2023
Reported by CALIFORNIA AG, MAINE AG filings
Stanford University is one of the world's leading research universities. Stanford is known for its entrepreneurial character, drawn from the legacy of its founders, Jane and Leland Stanford, and its relationship to Silicon Valley. Soon the university will be also known for 430Gb of internal data leaked online. Private information, confidential documents etc. Who is interested - contact us in messages section.
Stanford University's Department of Public Safety experienced a ransomware attack. Unauthorized access occurred between May 12, 2023, and September 27, 2023, when the incident was discovered. Personal information, including names and other operational data, may have been impacted. The university notified law enforcement, engaged forensic investigators, and terminated unauthorized access. Identity theft protection services are being offered to affected individuals, including minors.
Stanford University reported an external system breach (hacking) occurring on May 12, 2023, discovered on September 27, 2023. The incident compromised names and Social Security Numbers of 27,000 individuals, including 3 Maine residents. Stanford notified affected individuals in writing on March 11, 2024, and provided 24 months of credit monitoring and identity protection services through IDX and TransUnion.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 27,000