MalwareEducationEducationRansomwareCapture Stored DataData EncryptedData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Clackamas Community College

bd_232ecac7dbf4f631 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 19, 2024

Filed

Apr 1, 2024

To disclose

10 weeks

Affected

1state residents only

Linked

7 records

Confidence

67%

Full breach record for Clackamas Community College →2 incidents on file

Clackamas Community College detected encryption on computer systems on January 19, 2024, indicating a ransomware attack. An unknown third party accessed the network and copied files from a shared server. The incident affected one New Hampshire resident. The college isolated the network, engaged forensic experts, and notified law enforcement. Identity theft protection services were offered to the affected individual.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d10 weeks discovery → filing

Incident timeline

discovery → filing · 10 weeks / 73 days

Jan 19, 2024

Discovered

Apr 1, 2024

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 62 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_d2582e60593a5be92024-01-19 · +73dVerified by operator

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_0e34364031db69162024-04-01Candidate
Montana State AGbd_ac2e47df35a2c54d2024-04-01Verified
Maine State AGbd_d05039a6b2f397ed2024-04-01Verified
Indiana State AGbd_fc885ebcb1e64b602024-04-01Verified by operator

Show 1 more filing ↓up to 2d gap

Massachusetts State AGbd_a2f4de4c883974cf2024-04-03 · +2dVerified by operator

Name: Clackamas Community College
norm: clackamas community college

Name: Clackamas Community College
norm: clackamas community college
Domain: clackamas.edu
Industry: Educationllm

Discovered: Jan 19, 2024
Materiality determined: —
Notification sent: Apr 1, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Consulted with federal law enforcementNotified federal law enforcement

During the incident: Isolated its network
Moved systems offline
Disabled user access
Consulted with federal law enforcement
Engaged outside forensic experts to investigate the incident
Activated its incident response plan
Launched an internal investigation
Engaged a third-party forensic security firm to further investigate the incident and confirm the security of its computer systems
Notified federal law enforcement
Cooperating with that investigation
Offering identity theft protection services through IDX
Changes made: Evaluating additional measures we can take to mitigate the risk of a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGApr 1 · first

Montana State AGApr 1 · first

Maine State AGApr 1 · first

Indiana State AGApr 1 · first

New Hampshire State AGApr 1 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/clackamas-community-college-20240401.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2024
Raw hash: 6b8c50feff0a80ca38b17a7190018bd3ad3b78340752e6a1d3280d6b3255f488

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityClackamas Community College

Victim entityClackamas Community College

Incidentdiscovered Jan 19, 2024

Stated responseIsolated its network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov