HackingEducationEducationStolen CredentialsTargetedPIIIdentity (basic)LowContained

Gaston College

bd_115feb0035c68f6a · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 22, 2023

Filed

Aug 28, 2023

To disclose

27 weeks

Affected

7state residents only

Linked

9 filings

Confidence

66%

Full breach record for Gaston College →

Gaston College notified individuals of unauthorized network access occurring Feb 21-22, 2023. Suspicious activity was detected on Feb 22, 2023. The attacker acquired files containing personal information. Gaston College engaged the NC Joint Cybersecurity Task Force and third-party specialists. Remediation includes policy reviews and additional safeguards. 12 months of identity monitoring via Kroll offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 27 weeks / 187 days

Feb 21, 2023

Begins

Feb 22, 2023

Discovered

Aug 28, 2023

Filed

vs. sector median

+18 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitesnatchbd_9f324ce3f5933d572023-04-02 · +148dVerified by operator
Leak Sitenokoyawabd_398ba9c747a25eb22023-03-09 · +172dVerified by operator

Regulatory filings (6) · sorted by filing gap

South Carolina State AGbd_1b93a11525bbc5db2023-08-29 · +1dVerified
Massachusetts State AGbd_31263361e9a984602023-08-29 · +1dVerified
New Hampshire State AGbd_930490fe30ca1f2d2023-08-29 · +1dVerified
Maine State AGbd_f4c0d005bff0a19a2023-08-29 · +1dVerified

Show 2 more filings ↓up to 3d gap

Indiana State AGbd_53511d0b016ed9812023-08-25 · +3dCandidate
Vermont State AGbd_8dd8588b89e6f20b2023-08-25 · +3dVerified

Name: Gaston College
norm: gaston college
Domain: gaston.edu

Name: Gaston College
norm: gaston college
Domain: gaston.edu
Industry: Educationllm

Discovered: Feb 22, 2023
Breach occurred: Feb 21, 2023 – Feb 22, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 7state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: assistance from the North Carolina Joint Cybersecurity Task Force
Initial access: valid_credentials

During the incident: Worked to secure and restore our systems
Launched an investigation, with assistance from the North Carolina Joint Cybersecurity Task Force
Involved third-party cybersecurity specialists
Engaged a third-party specialist to conduct a comprehensive programmatic and manual review
Offering you free access to 12 months of complimentary identity monitoring services through Kroll
Changes made: Review our existing policies and procedures
Implement additional administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(187 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGAug 25 · first

Vermont State AGAug 25 · first

Montana State AG+3d · this page

South Carolina State AG+4d

Massachusetts State AG+4d

New Hampshire State AG+4d

Maine State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-612.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 28, 2023
Raw hash: d0c6f1541ffc8a9a874518024669305b8f79a96348f15f88ee3f9f19cc5868a6

Linked disclosures

Ransomware claims (2)

Regulatory filings (6) · sorted by filing gap

Reporting entityGaston College

Victim entityGaston College

Incidentdiscovered Feb 22, 2023

Stated responseWorked to secure and restore our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov