MalwareEducationEducationRansomwareData EncryptedIdentity (basic)Government IDMediumResolved

City College

bd_08d2dc1422fc01d6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 16, 2021

Filed

Nov 11, 2021

To disclose

12 weeks

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for City College →

City College notified Montana residents of a ransomware incident discovered on August 16, 2021. The breach potentially exposed names, SSNs, dates of birth, and addresses. The college engaged forensic experts, restored systems, and provided credit monitoring services. The investigation concluded on October 28, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 87 days

Aug 16, 2021

Discovered

Nov 11, 2021

Filed

vs. sector median

+2 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_976e6e57c5ac3d112021-11-11Verified
New Hampshire State AGbd_7738cb44088635cb2021-11-10 · +1dVerified
Maine State AGbd_981815f84c1845bc2021-11-10 · +1dCandidate
Massachusetts State AGbd_d46c7279255d45042021-11-10 · +1dVerified

Name: City College
norm: city college

Name: City College
norm: city college
Industry: Educationllm

Discovered: Aug 16, 2021
Materiality determined: —
Notification sent: Nov 11, 2021
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Engaged third-party forensic and incident response experts
Secured and safely restored systems and operations
Retrieved and confirmed deletion of the information that was obtained
Changes made: Implementing additional cybersecurity safeguards
Enhancing employee cybersecurity training
Improving cybersecurity policies, procedures, and protocols
Providing access to Single Bureau Credit Monitoring services at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(87 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGNov 10 · first

Maine State AGNov 10 · first

Massachusetts State AGNov 10 · first

Indiana State AG+1d

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-69.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 11, 2021
Raw hash: 22d23c2981c4f7d29c3722b25df655252f1f410da71363e71727391c3956f2d5

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCity College

Victim entityCity College

Incidentdiscovered Aug 16, 2021

Stated responseEngaged third-party forensic and incident response experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov