The Maine Office of the Attorney General reported that Grinnell College experienced an inadvertent disclosure of payroll information on March 13, 2023, which was discovered on May 7, 2023. The incident affected 2,319 individuals, including 6 residents of Maine, and involved information such as social security numbers. The college offered 12 months of Experian IdentityWorks as identity theft protection services.
TPRM report: https://www.rankiteo.com/company/grinnell-college-center-for-careers-life-and-service
"id": "gri951072725",
"linkid": "grinnell-college-center-for-careers-life-and-service",
"type": "Breach",
"date": "3/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 2319,
'industry': 'Education',
'location': 'Grinnell, Iowa',
'name': 'Grinnell College',
'type': 'Educational Institution'}],
'attack_vector': 'Inadvertent Disclosure',
'data_breach': {'number_of_records_exposed': 2319,
'personally_identifiable_information': ['Social Security '
'Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security Numbers']},
'date_detected': '2023-05-07',
'description': 'Inadvertent disclosure of payroll information including '
'social security numbers.',
'impact': {'data_compromised': ['Social Security Numbers'],
'identity_theft_risk': 'High'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'response': {'remediation_measures': ['Offered 12 months of Experian '
'IdentityWorks']},
'title': 'Grinnell College Payroll Information Disclosure',
'type': 'Data Breach'}