MisuseEducationEducationPrivilege AbuseData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)FinancialMediumContained

Scripps College

bd_3cdae602a5d489c7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 12, 2012

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Scripps College →

Scripps College reported a data breach involving unauthorized access to financial aid application data by a former employee between 2008 and 2012. The incident involved the sharing of names, SSNs, dates of birth, and financial information with an unauthorized financial aid professional. The College contained the breach, terminated the employee's access, and enhanced security procedures. No evidence of further misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 1, 2008

Begins

Jul 12, 2012

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_a76f6c49f66eb0b92012-07-10 · +2dVerified
Massachusetts State AGbd_9f4b0802e1aae47a2012-07-16 · +4dVerified

Name: Scripps College
norm: scripps college

Name: Scripps College
norm: scripps college
Industry: Educationllm

Discovered: —
Breach occurred: Jan 1, 2008 – Dec 31, 2012
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial
Data elements: Date of birth
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalSecondary
Initial access: insider_action

During the incident: Eliminated the employee’s access to the financial aid information
Acted to prevent further access by the unauthorized individual
Reviewed computer systems and security
Conducted interviews to assess the scope of the conduct
Changes made: Reviewed the College’s access procedures related to financial aid data
Taking steps to further enhance security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGJul 10 · first

California State AG+2d · this page

Massachusetts State AG+6d

Pattern: first filing Jul 10 (NH), last Jul 16 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-32212
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 12, 2012
Raw hash: 65eb1439e8c79d05aa4a41ba299bdec8c6bfc13cc1232a0fb347e14a653cf76c

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityScripps College

Victim entityScripps College

IncidentInsider

Stated responseEliminated the employee’s access to the financial aid information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov