Cambridge College
bd_478065da87b1d090 · schema v1 · pii pii-v1
Full breach record for Cambridge College →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Monti on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
boston.cambridgecollege.edu
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Mar 15, 2023
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Massachusetts State AGbd_1b1b80c2e94bd79b2023-08-04 · +142dVerified by operator
- Montana State AGbd_20a4d0e0bd5816c52023-08-04 · +142dVerified by operator
- California State AGbd_779426bb4b7f7fe42023-08-04 · +142dVerified by operator
- Maine State AGbd_d02e890acc344ec42023-08-04 · +142dVerified by operator
Show 3 more filings ↓Show fewer ↑up to 149d gap
- Vermont State AGbd_e670e3cd233640d02023-08-04 · +142dVerified by operator
- Indiana State AGbd_ecd38b291f8998a72023-08-04 · +142dVerified
- New Hampshire State AGbd_1ab70eae11187ebf2023-08-11 · +149dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing Aug 4 (MA), last Aug 11 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
monti
According to ransomware.live, Monti is a ransomware group first observed in June 2022 that initially copied nearly all of Conti's leaked source code, pivoting to target government, legal, and healthcare entities, later releasing a new Linux variant in 2023 with significantly less Conti code similarity, and experimenting with an affiliate model.