HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Santa Clarita Community College District
bd_3baa19847fe317a9 · schema v1 · pii pii-v1
Full breach record for Santa Clarita Community College District →Keenan & Associates, an insurance brokerage, experienced a cybersecurity incident between August 21-27, 2023. An unauthorized party accessed internal systems and exfiltrated data including names, SSNs, health info, and government IDs. The incident was discovered on August 27, 2023. 612 Rhode Island residents were affected. Keenan engaged forensic experts, contained the breach, notified law enforcement, and offered 24 months of identity monitoring.
California clockDiscovered Aug 27, 2023 → Notified Jan 26, 2024152d ✗ CA 60-day late30 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed612 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-582896
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2024
- Raw hash
- 2332ad3b22bb307b7596711bd031175176da398f84d32273c9ffbf0136dd7235
Reporting entity
- Name
- Keenan & Associatesnorm: keenan associates
Victim entity
- Name
- Santa Clarita Community College Districtnorm: santa clarita community college district
Incident
- Discovered
- Aug 27, 2023
- Materiality determined
- —
- Notification sent
- Jan 26, 2024
- Affected individuals
- 612
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcementContinuing to support federal law enforcement’s investigation
Compliance
- Time to disclose
- 30 weeks(208 days from discovery to filing)
- Compliance flags
- CA 60-day late · 152d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 27, 2023→ Notified: Jan 26, 2024152d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.