MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Sierra College
bd_186fb37bccdc5f82 · schema v1 · pii pii-v1
Full breach record for Sierra College →Sierra Joint Community College District experienced a ransomware attack on August 20, 2022, resulting in the encryption of some systems. The incident potentially exposed personal information including names, addresses, passport numbers, driver's license numbers, Social Security numbers, financial account information, and medical information. The district engaged a third-party forensic firm, secured the network, and offered 12 months of identity monitoring to affected individuals.
California clockDiscovered Aug 20, 2022 → Notified Nov 9, 202281d ✗ CA 60-day late12 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_b715d85a4b900a47Leak Sitevicesocietyfiled 2022-09-20(52d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_baf9efa918d193bfMontana State AGfiled 2022-11-11Verified by operator
- bd_1908b5dabe61a707California State AGfiled 2023-02-03(84d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-559135
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 11, 2022
- Raw hash
- 71e38ecc3630e13f44cd4cc3463d973ad146906e348ac6e8dd8f171728c04352
Reporting entity
- Name
- Sierra Joint Community College Districtnorm: sierra joint community college district
Victim entity
- Name
- Sierra Collegenorm: sierra college
Incident
- Discovered
- Aug 20, 2022
- Materiality determined
- —
- Notification sent
- Nov 9, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 12 weeks(83 days from discovery to filing)
- Compliance flags
- CA 60-day late · 81dLeak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 20, 2022→ Notified: Nov 9, 202281d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.