MalwareEducationEducationRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)CredentialsLowResolved

Maricopa County Community Colleges District

bd_11b9d3a33fef8fe9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 16, 2021

Filed

Jun 10, 2021

To disclose

12 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Maricopa County Community Colleges District →2 incidents on file

Maricopa County Community Colleges District detected suspicious activity on March 16, 2021, which forensic investigation determined was a potential ransomware attack that was prevented. An attempt to download a directory file containing names, dates of birth, email addresses, and hashed passwords was identified, but no evidence of exfiltration was found. Systems were taken offline and restored. Passwords were reset for all users. No student or employee PII from HR or student systems was compromised.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 12 weeks / 86 days

Mar 12, 2021

Begins

Mar 16, 2021

Discovered

Jun 10, 2021

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Maricopa County Community Colleges District
norm: maricopa county community colleges district
Domain: maricopa.edu

Name: Maricopa County Community Colleges District
norm: maricopa county community colleges district
Domain: maricopa.edu
Industry: Educationllm

Discovered: Mar 16, 2021
Breach occurred: Mar 12, 2021 – Mar 16, 2021
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Credentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Implemented incident response protocols
Took all systems offline
Hired a team of experts to investigate the suspicious activity
Forced password reset to all MCCCD users, including staff and students
Changes made: Supplemental 24x7 endpoint detection and threat hunting software
Additional deployments of multi-factor authentication for all MCCCD employees
Offering complimentary Sophos anti-virus and scanning software for all employees and students for up to ten personal devices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-541788
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 10, 2021
Raw hash: cdd8d72c348521c1f825ab087ddaf5ea2d35f87d451a3272d951b3ec30ec41fc

Reporting entityMaricopa County Community Colleges District

Victim entityMaricopa County Community Colleges District

Incidentdiscovered Mar 16, 2021

Stated responseImplemented incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov