HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
North Orange County Community College District
bd_08c4560773f95b7a · schema v1 · pii pii-v1
Full breach record for North Orange County Community College District →North Orange County Community College District (NOCCCD) disclosed a cybersecurity incident affecting Cypress College and Fullerton College networks. Unauthorized access occurred between Dec 7, 2021, and Jan 10, 2022. Files containing sensitive student, staff, and faculty information (names, SSNs, etc.) may have been viewed or taken. NOCCCD engaged forensic specialists, reported to the FBI, and offered credit monitoring. Investigation is ongoing.
California clockDiscovered Jan 10, 2022 → Notified Mar 25, 202274d ✗ CA 60-day late11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4c2cb50347a6bc30Maine State AGfiled 2022-03-25Verified
- bd_fb480a363c03778bMontana State AGfiled 2022-03-25Verified
- bd_5bba2129dab58ac2California State AGfiled 2022-05-24(60d gap)Verified
- bd_a594205c18f354a0New Hampshire State AGfiled 2022-05-31(67d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-551998
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2022
- Raw hash
- c1662c9c350662ed7a417b9dd6d023cde0b6dc9c6684aa53f6d24d91c0240ea9
Reporting entity
- Name
- North Orange County Community College Districtnorm: north orange county community college district
- Domain
- nocccd.edu
- Industry
- education
Victim entity
- Name
- North Orange County Community College Districtnorm: north orange county community college district
- Domain
- nocccd.edu
- Industry
- education
Incident
- Discovered
- Jan 10, 2022
- Materiality determined
- —
- Notification sent
- Mar 25, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported this incident to law enforcement and is cooperating with their investigationReported this incident to the FBIReporting to regulatory authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- CA 60-day late · 74d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 10, 2022→ Notified: Mar 25, 202274d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.