HackingEducationEducationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)EducationLowContained

Simpson University

bd_2d778ab30955bc95 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 10, 2022

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Simpson University →

Simpson University reported that an unauthorized party temporarily gained access to certain employee email accounts between July 29, 2021, and September 17, 2021. The investigation determined that the accounts contained personal information including names and potentially education records (major, year in school). The university secured the accounts, engaged a forensic firm, and is offering one year of complimentary credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 29, 2021

Begins

Jun 10, 2022

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_fb29498351cb1da52022-06-10Verified by operator
Indiana State AGbd_0cc0ad856d2c76af2022-06-09 · +1dVerified
Montana State AGbd_54e9b8db13f45bb12022-06-09 · +1dCandidate
Massachusetts State AGbd_bed5fb70d42ab6302022-06-13 · +3dVerified

Name: Simpson University
norm: simpson university

Name: Simpson University
norm: simpson university
Industry: Educationllm

Discovered: —
Breach occurred: Jul 29, 2021 – Sep 17, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Education
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Secured the email accounts
Began an internal investigation
Engaged a forensic security firm to further investigate and confirm the security of our email and computer systems
Offering a complimentary one-year membership of Experian IdentityWorks SM Credit 3B
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJun 9 · first

Montana State AGJun 9 · first

Maine State AG+1d

California State AG+1d · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-554210
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 10, 2022
Raw hash: 60c458f171a55b17c86612da8673e6be75e676e6fb589bbd93a90e83fd7457ca

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySimpson University

Victim entitySimpson University

IncidentUnauthorized Access

Stated responseSecured the email accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov