Social EngineeringEducationEducationPhishingStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsCredentialsMediumContained

POINT LOMA NAZARENE UNIVERSITY

bd_311641812307cea4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 7, 2014

Filed

Dec 15, 2014

To disclose

10 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for POINT LOMA NAZARENE UNIVERSITY →2 incidents on file

Point Loma Nazarene University experienced a phishing attack between October 7 and October 20, 2014, resulting in unauthorized access to five employee email accounts. Potentially compromised data includes names, Social Security numbers, credit card numbers, CVV codes, expiration dates, usernames, passwords, dates of birth, and driver’s license numbers. The University disabled affected accounts, changed passwords, blocked phishing URLs, and is implementing two-factor authentication. Complimentary identity protection services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 69 days

Oct 7, 2014

Begins

Oct 7, 2014

Discovered

Dec 15, 2014

Filed

vs. sector median

+1 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_a84868aa69f5394e2014-12-18 · +3dVerified

Name: POINT LOMA NAZARENE UNIVERSITY
norm: point loma nazarene university

Name: POINT LOMA NAZARENE UNIVERSITY
norm: point loma nazarene university
Industry: Educationllm

Discovered: Oct 7, 2014
Breach occurred: Oct 7, 2014 – Oct 20, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsCredentials
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Disabled the affected accounts
Changed the passwords
Ensured that they were not used to access any portions of the University’s system
Informed individuals who may have been the target of the phishing attack to be on alert
Instructed them to change passwords if phishing links were clicked
Sent educational emails on how to avoid phishing attacks
Blocked the URL associated with the phishing attack
Offering you access to a complimentary one-year membership to Experian’s ProtectMyID Alert triple bureau
Retained outside forensic experts to determine the scope of this incident
Changes made: Implemented or is in the process of implementing two-factor authentication for all Point Loma accounts that may handle sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGDec 15 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-47722
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 15, 2014
Raw hash: 1badf3e78533149b1e65abe274d4540aadeddcfd8fe473a9b83e2488df0756ff

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPOINT LOMA NAZARENE UNIVERSITY

Victim entityPOINT LOMA NAZARENE UNIVERSITY

Incidentdiscovered Oct 7, 2014

Stated responseDisabled the affected accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov