HackingEducationEducationStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Bristol Community College

bd_3fb72d1d873b8bb2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 23, 2022

Filed

May 9, 2023

To disclose

20 weeks

Affected

7state residents only

Linked

5 records

Confidence

66%

Full breach record for Bristol Community College →5 incidents on file

Bristol Community College experienced unauthorized network access between Dec 14-23, 2022. Forensic review confirmed removal of full names and government IDs (SSN, driver's license). The college engaged external cybersecurity professionals, restored systems, and reported to federal authorities. Affected individuals were offered 12 months of Experian IdentityWorks credit monitoring. Approximately 3,760 Rhode Island residents were impacted.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d20 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 9 days

discovery → filing · 20 weeks / 137 days

Dec 14, 2022

Begins

Dec 23, 2022

Discovered

May 9, 2023

Filed

This filing is one of 5 records about the same incident.View merged incident

A leak claim by vicesociety about this victim was first seen 103 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitevicesocietybd_d321dafe550e60ff2023-01-26 · +102dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_79d131df7f0f75d12023-05-09Verified by operator
Maine State AGbd_b814eb47c0a9bd902023-05-09Verified
Indiana State AGbd_b616aeff219906da2023-05-10 · +1dVerified

Name: Bristol Community College
norm: bristol community college

Name: Bristol Community College
norm: bristol community college
Industry: Educationllm

Discovered: Dec 23, 2022
Breach occurred: Dec 14, 2022 – Dec 23, 2022
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reported the intrusion to federal authorities
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with external national cybersecurity professionals
Worked around the clock to restore our current systems
Promptly reported the intrusion to federal authorities
Changes made: Evaluating our internal controls and instituting further security measures to protect personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMay 9 · first

Maine State AGMay 9 · first

Montana State AGMay 9 · first · this page

Indiana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-256.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 9, 2023
Raw hash: 4aeae2f1033872b26ee9355dae16bed153878eec006667cbb76f6be806da6ed4

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityBristol Community College

Victim entityBristol Community College

Incidentdiscovered Dec 23, 2022

Stated responseLaunched an investigation in consultation with external national cybersecurity professionals

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov