Social EngineeringEducationEducationPhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

California Community Colleges Chancellor's Office

bd_173a764261b0098f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 12, 2019

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for California Community Colleges Chancellor's Office →

Pearson VUE, a service provider for the California Community Colleges Chancellor's Office, discovered that California Nurses' Aide information may have been improperly forwarded to an unauthorized account due to email phishing between October 2016 and September 2017. Affected data may include name, Social Security number, date of birth, and exam score information. The unauthorized account was blocked, and additional safeguards were implemented. Complimentary two-year Experian IdentityWorks membership is offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 1, 2016

Begins

Apr 12, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: California Community Colleges Chancellor's Office
norm: california community colleges chancellor s office

Name: California Community Colleges Chancellor's Office
norm: california community colleges chancellor s office
Industry: Educationllm

Discovered: —
Breach occurred: Oct 1, 2016 – Sep 30, 2017
Materiality determined: —
Notification sent: Aug 1, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Third party: via Pearson VUE
Initial access: phishing_link

During the incident: Blocked the unauthorized account
Implemented additional processing safeguards
Took further steps to secure our systems
Offering a complimentary two-year membership in Experian's IdentityWorks SM
Changes made: Implemented additional processing safeguards
Took further steps to secure our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-146256
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2019
Raw hash: aeb0cd96293ec409a119ee24de669a24e2f177af32ee462338d6d054464073f7

Reporting entityCalifornia Community Colleges Chancellor's Office

Victim entityCalifornia Community Colleges Chancellor's Office

IncidentPhishing

Stated responseBlocked the unauthorized account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov