MalwareEducationEducationRansomwareData EncryptedTargetedIdentity (basic)LowContained

Napa Valley College

bd_42c5cf0b769a7de1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 10, 2022

Filed

Sep 12, 2022

To disclose

13 weeks

Affected

5state residents only

Linked

7 filings

Confidence

66%

Full breach record for Napa Valley College →

Napa Valley College notified the New Hampshire AG of a ransomware attack discovered on June 10, 2022. The incident impacted 5 NH residents, exposing names and other personal info. NVC secured its network, engaged forensic investigators, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d13 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 13 weeks / 94 days

Jun 10, 2022

Begins

Jun 10, 2022

Discovered

Sep 12, 2022

Filed

vs. sector median

+5 wks slower

This filing is one of 7 about the same incident.View merged incident

A leak claim by blackbyte about this victim predates this filing by 78 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblackbytebd_06003cd7508c59e12022-06-26 · +78dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_702fd67a80e2d23d2022-09-06 · +6dVerified
Montana State AGbd_ad4f9760c3bea46a2022-09-06 · +6dVerified
Massachusetts State AGbd_c854f60d687471582022-09-06 · +6dVerified
California State AGbd_d6555e6880c924cf2022-09-06 · +6dVerified

Show 1 more filing ↓up to 18d gap

Maine State AGbd_2545a8efbeb85ed62022-08-25 · +18dCandidate

Name: Napa
norm: napa
Domain: napa.parts

Name: Napa Valley College
norm: napa valley college
Industry: Educationllm

Discovered: Jun 10, 2022
Breach occurred: Jun 10, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 6, 2022
Affected individuals: 5state-resident count only
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Secured the network
Engaged a third-party forensic firm to investigate the incident
Changes made: Enhance the security of its network to prevent similar incidents from occurring in the future
Offered complimentary credit monitoring and identity protection services for 12 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(94 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGAug 25 · first

Indiana State AG+12d

Montana State AG+12d

Massachusetts State AG+12d

California State AG+12d

New Hampshire State AG+18d · this page

Pattern: first filing Aug 25 (ME), last Sep 12 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/napa-valley-college-20220912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2022
Raw hash: 0ad7cc9c3b534b8babea6df7262cb422e56a98c156422aa58fc0c122c15f1984

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityNapa

Victim entityNapa Valley College

Incidentdiscovered Jun 10, 2022

Stated responseSecured the network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov