AccidentalEducationEducationMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDHighResolved

Green River Community College

bd_5339b68fe62c5b20 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 15, 2017

Filed

Aug 24, 2017

To disclose

9 days

Affected

3,399state residents only

Confidence

68%

Full breach record for Green River Community College →

Green River Community College reported a data breach in Washington involving the loss of a thumbdrive containing employee PII, including SSNs and salary data. The device was downloaded on Dec 6, 2016, and discovered missing during an audit on Aug 15, 2017. 3,399 Washington residents were affected. The college notified law enforcement and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 252 days

discovery → filing · 9 days

Dec 6, 2016

Begins

Aug 15, 2017

Discovered

Aug 24, 2017

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,399 affectedView incident

Name: Green River Community College
norm: green river community college
Domain: greenriver.edu

Name: Green River Community College
norm: green river community college
Domain: greenriver.edu
Industry: Educationllm

Discovered: Aug 15, 2017
Breach occurred: Dec 6, 2016
Undetected for: 252 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 24, 2017
Affected individuals: 3,399state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security number
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle 200-299dexposure 0d
WA-stated discovery: Found after the fact
Attack vector: Misconfiguration
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified appropriate state agenciesAuburn Police investigation complete
Initial access: removable_media

During the incident: Notified appropriate state agencies
Alerted the Auburn Police
Secured a contract for identity theft protection services
Conducted an audit of access to information
Examined current practices to ensure diligence in the protection of data
Changes made: Offering 12 months of complimentary credit monitoring and identity theft protection services through ID Experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 days(9 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9733.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 24, 2017
Raw hash: a8f5136b8824399eb6819275fab0f3381e4e4b054e41233ff49ac3cf19b8b5d8

Reporting entityGreen River Community College

Victim entityGreen River Community College

Incidentdiscovered Aug 15, 2017

Stated responseNotified appropriate state agencies

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com