DisclosureLens
MalwareEducationEducationRansomwareCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDHigh

Napa Valley College

bd_2545a8efbeb85ed6 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 18, 2022

Filed

Aug 25, 2022

To disclose

7 days

Affected · nationwide

9,3414 in this filing

Linked

7 filings

Confidence

50%
Full breach record for Napa Valley College

Napa Valley College experienced a ransomware attack on June 10, 2022, which was later discovered on August 18, 2022. The breach affected 4 Maine residents, compromising their names and Social Security numbers. In response, the college began notifying affected individuals on August 25, 2022, and offered 12 months of credit monitoring and identity theft protection through TransUnion.

Leak gap clock Leak >30d7 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 69 days
discovery → filing · 7 days

Jun 10, 2022

Begins

Aug 18, 2022

Discovered

Aug 25, 2022

Filed

vs. sector median

8 wks faster

This filing is one of 7 about the same incident.View merged incident
A leak claim by blackbyte about this victim predates this filing by 60 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 18d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗

Pattern: first filing Aug 25 (ME), last Sep 12 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.