HackingEducationEducationStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

California Northstate University

bd_560a35d3ee2fd039 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 2, 2023

Filed

Dec 21, 2023

To disclose

7 weeks

Affected

4state residents only

Linked

6 filings

Confidence

65%

Full breach record for California Northstate University →

California Northstate University notified individuals of unauthorized access to its computer systems between Feb 12-13, 2023. The incident potentially exposed names. The university secured systems, investigated, and offered one year of Experian IdentityWorks. Discovery was confirmed on Nov 2, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 263 days

discovery → filing · 7 weeks / 49 days

Feb 12, 2023

Begins

Nov 2, 2023

Discovered

Dec 21, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_208851ca8a484b1e2023-12-21Candidate
Washington State AGbd_ab1d8a5c45f505402023-12-21Verified
New Hampshire State AGbd_ba7f861da3b47dd52023-12-21Verified
California State AGbd_c9595e7fbac854462023-12-21Verified

Show 1 more filing ↓

Massachusetts State AGbd_f5c4183370022f722023-12-21Verified

Name: California Northstate University
norm: california northstate university

Name: California Northstate University
norm: california northstate university
Industry: Educationllm

Discovered: Nov 2, 2023
Breach occurred: Feb 12, 2023 – Feb 13, 2023
Undetected for: 263 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Secured the systems involved
Began an investigation
Offering you a complimentary one-year membership in Experian’s IdentityWorks
Changes made: Implemented additional security measures to enhance the security of the network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGDec 21 · first

Washington State AGDec 21 · first

New Hampshire State AGDec 21 · first

California State AGDec 21 · first

Massachusetts State AGDec 21 · first

Montana State AGDec 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-969.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2023
Raw hash: fa0c6905230421e687cc7da79ae09ddf31f2eaa77d7da1fd6c1d55de22acc149

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCalifornia Northstate University

Victim entityCalifornia Northstate University

Incidentdiscovered Nov 2, 2023

Stated responseSecured the systems involved

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov