MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Pellissippi State Community College
bd_195b67b4feac6ae7 · schema v1 · pii pii-v1
Full breach record for Pellissippi State Community College →Pellissippi State Community College experienced a ransomware attack on December 5-6, 2021. The attacker accessed an Active Directory database containing names, usernames, emails, hashed passwords, and other identifiers for students, faculty, and staff. The college notified law enforcement, enhanced security, and provided 12 months of free credit monitoring via TransUnion to affected individuals.
California clockDiscovered Dec 6, 2021 → Notified Feb 1, 202257d ✓ CA 60-day OK8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_42038c4a8134e07aMaine State AGfiled 2022-02-01Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550601
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 1, 2022
- Raw hash
- 2a0365a248aaf827d4f41dbdbc56889278d27a9f96c73c298ebe528d5db5c6fc
Reporting entity
- Name
- Pellissippi State Community Collegenorm: pellissippi state community college
- Domain
- pstcc.edu
Victim entity
- Name
- Pellissippi State Community Collegenorm: pellissippi state community college
- Domain
- pstcc.edu
Incident
- Discovered
- Dec 6, 2021
- Materiality determined
- —
- Notification sent
- Feb 1, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 6, 2021→ Notified: Feb 1, 202257d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.