MalwareEducationEducationRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Knox College

bd_422734f3a7f00c32 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 24, 2022

Filed

Jan 5, 2023

To disclose

6 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

64%

Full breach record for Knox College →

Knox College experienced a ransomware attack on November 24, 2022, resulting in unauthorized access and exfiltration of personal information including names, addresses, dates of birth, Social Security numbers, driver's license numbers, and passport numbers. The college engaged cybersecurity experts, notified the FBI, and is offering credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 24, 2022 → Notified Jan 3, 202340d ✓ CA 60-day OK6 weeks discovery → filing

Incident timeline

discovery → filing · 6 weeks / 42 days

Nov 24, 2022

Begins

Nov 24, 2022

Discovered

Jan 5, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehivebd_03e98ba6420996102022-12-10 · +26dVerified by operator

Regulatory filings (9) · sorted by filing gap

Maine State AGbd_20c0e7297b3145b72023-01-05Verified
Massachusetts State AGbd_7c821ccb4a4587272023-01-05Verified
Oregon State AGbd_acd0f3afbf6abce12023-01-05Verified
New Hampshire State AGbd_c8299e5911b524a42023-01-05Verified

Show 5 more filings ↓up to 4d gap

Maine State AGbd_d926153edc6e25f52023-01-05Verified
Washington State AGbd_0d522761fa2b843b2023-01-04 · +1dVerified
Montana State AGbd_7dae4dc8f93f37322023-01-04 · +1dVerified
Indiana State AGbd_1a88aa8267d823742023-01-03 · +2dVerified
Illinois State AGbd_f1c20669fb6d1fab2023-01-01 · +4dCandidate

Name: Knox College
norm: knox college

Name: Knox College
norm: knox college
Industry: Educationllm

Discovered: Nov 24, 2022
Breach occurred: Nov 24, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 3, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to the Federal Bureau of Investigation

During the incident: Took steps to secure our network
Initiated an investigation with the assistance of cybersecurity experts
Reported the incident to the Federal Bureau of Investigation
Implemented additional security features to reduce the risk of a similar incident occurring in the future
Offering complimentary credit monitoring and identity protection services for 12/24 months through IDX
Changes made: Implemented additional security features to reduce the risk of a similar incident occurring in the future
Continue to evaluate ways to further enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: CA 60-day OK · 40d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 24, 2022
→ Notified: Jan 3, 2023
40d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 24, 2022 → Notified: Jan 3, 2023	40d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+2d

Washington State AG+3d

Montana State AG+3d

Maine State AG+4d

Massachusetts State AG+4d

Oregon State AG+4d

New Hampshire State AG+4d

Maine State AG+4d

California State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-561334
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 5, 2023
Raw hash: a854152ebacfa4b52f10f63a4cf544113a7ecf20e05e9eefce7a6a3355e92251

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityKnox College

Victim entityKnox College

Incidentdiscovered Nov 24, 2022

Stated responseTook steps to secure our network

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov