HackingIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
The Savannah College Of Art And Design, Inc.
bd_34b8f401d5dd864d · schema v1 · pii pii-v1
Full breach record for The Savannah College Of Art And Design, Inc. →The Savannah College of Art and Design (SCAD) notified New Hampshire and other state attorneys general of a data security incident. Unauthorized access occurred on August 22, 2022, when an unauthorized person gained access to SCAD's computer network and acquired copies of files containing personal information. SCAD contained the incident, engaged a cybersecurity firm, and reported the matter to law enforcement. Affected individuals were offered one year of complimentary identity theft protection via Experian.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4d98e0839991c18fMaine State AGfiled 2022-09-21Candidate
- bd_6f5c6ce7a7e92adaMontana State AGfiled 2022-09-21Candidate
- bd_eb968d72925d9e48California State AGfiled 2022-09-21Verified
- bd_343ef8796edb131dWashington State AGfiled 2022-09-22(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/savannah-college-art-design-20220921.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 21, 2022
- Raw hash
- 34871b1f1840f174100bf745faf76b0bb5f857e5f692e5c86a3abe72d4df8642
Reporting entity
- Name
- The Savannah College Of Art And Design, Inc.norm: the savannah college of art and design
Victim entity
- Name
- The Savannah College Of Art And Design, Inc.norm: the savannah college of art and design
Incident
- Discovered
- Aug 22, 2022
- Materiality determined
- —
- Notification sent
- Sep 21, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.