HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedCredentialsIdentity (basic)LowContained

ITHAKA

bd_321840cdb8032897 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 31, 2014

To disclose

—

Affected

800scope not determined

Confidence

67%

Full breach record for ITHAKA →

ITHAKA (JSTOR) notified ~800 users that their MyJSTOR accounts were accessed without authorization. Compromised data included usernames, passwords, email addresses, and profile details. No financial data was accessed. ITHAKA contained the incident and is reviewing security measures.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 31, 2014

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed800 affectedView incident

Name: ITHAKA
norm: ithaka

Name: ITHAKA
norm: ithaka
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: Mar 28, 2024
Affected individuals: 800scope not determined
Data types: CredentialsIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Taken the steps necessary to stop this activity
Reviewing our security measures to prevent future incidents
Changes made: Reviewing our security measures to prevent future incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44654
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2014
Raw hash: e7b4d61c6f27148419225bfced9989ae46fd4db74997656a839168b8df6509ef

Reporting entityITHAKA

Victim entityITHAKA

IncidentUnauthorized Access

Stated responseTaken the steps necessary to stop this activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov