MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEDUCATIONMediumContained
Río Hondo College
bd_2a4329f64ac93971 · schema v1 · pii pii-v1
Full breach record for Río Hondo College →Rio Hondo Community College District experienced a ransomware attack between October 12 and October 19, 2023. The incident involved unauthorized access to the network, encryption of devices, and exfiltration of files. Personal information of current and former students, including names, addresses, Social Security numbers, and dates of birth, was accessed. The district engaged a cybersecurity firm, secured the network, and offered credit monitoring services.
California clockDiscovered Oct 19, 2023 → Notified Feb 27, 2024131d ✗ CA 60-day late19 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-581591
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2024
- Raw hash
- ddb79db8a731595f7085532a20e309e3b97a3d874c17dff8273a76390921bc04
Reporting entity
- Name
- Río Hondo Collegenorm: rio hondo college
- Domain
- riohondo.edu
Victim entity
- Name
- Río Hondo Collegenorm: rio hondo college
- Domain
- riohondo.edu
Incident
- Discovered
- Oct 19, 2023
- Materiality determined
- —
- Notification sent
- Feb 27, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEDUCATION
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 19 weeks(131 days from discovery to filing)
- Compliance flags
- CA 60-day late · 131dLeak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 19, 2023→ Notified: Feb 27, 2024131d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.