MalwareRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICEDUCATIONMediumContained
Whitworth University
bd_000f0e63ede62e35 · schema v1 · pii pii-v1
Full breach record for Whitworth University →Whitworth University experienced a ransomware attack on July 29, 2022, where an unauthorized third party accessed and disabled systems. Personal information including names, SSNs, passport numbers, and health information for students and employees may have been accessed. The university engaged forensic specialists, notified law enforcement, and rebuilt affected systems. Credit monitoring was offered to affected individuals.
California clockDiscovered Jul 29, 2022 → Notified Oct 3, 202266d ✗ CA 60-day late41 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1b5f2a226647531bMaine State AGfiled 2023-05-13Candidate
- bd_e0cb1c9df0d3debcNew Hampshire State AGfiled 2023-05-12(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-566692
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 13, 2023
- Raw hash
- 8145034d11ba923fc93ca7b1f19175480a10b1e443300fba10cafb6757b68c08
Reporting entity
- Name
- Whitworth Universitynorm: whitworth university
- Domain
- whitworth.edu
Victim entity
- Name
- Whitworth Universitynorm: whitworth university
- Domain
- whitworth.edu
Incident
- Discovered
- Jul 29, 2022
- Materiality determined
- —
- Notification sent
- Oct 3, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICEDUCATION
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 41 weeks(288 days from discovery to filing)
- Compliance flags
- CA 60-day late · 66dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 29, 2022→ Notified: Oct 3, 202266d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.