HackingEducationEducationStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Cincinnati State Technical Community College

bd_5c215aff55f4b155 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 2, 2022

Filed

Dec 23, 2022

To disclose

7 weeks

Affected

62state residents only

Linked

7 filings

Confidence

65%

Full breach record for Cincinnati State Technical Community College →2 incidents on file

Cincinnati State Technical Community College notified affected individuals of a cybersecurity incident detected on November 2, 2022. Unauthorized access resulted in the removal of files containing personal information between October 30 and November 2, 2022. The college engaged forensic investigators, reported to law enforcement, and offered 12 months of credit monitoring. No evidence of identity theft was found.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 7 weeks / 51 days

Oct 30, 2022

Begins

Nov 2, 2022

Discovered

Dec 23, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitevicesocietybd_1eb618bc44c5d7ac2022-11-24 · +29dVerified by operator

Regulatory filings (5) · sorted by filing gap

California State AGbd_6f767de46277ed382022-12-23Verified
Massachusetts State AGbd_86261d43180efbf02022-12-23Verified by operator
Indiana State AGbd_8d23b1c916c18a7c2022-12-23Verified
Maine State AGbd_d8596b84c7cb5c4e2022-12-23Verified by operator

Show 1 more filing ↓up to 4d gap

New Hampshire State AGbd_6a42694f2cb8846e2022-12-27 · +4dVerified by operator

Name: Cincinnati State Technical Community College
norm: cincinnati state technical community college

Name: Cincinnati State Technical Community College
norm: cincinnati state technical community college
Industry: Educationllm

Discovered: Nov 2, 2022
Breach occurred: Oct 30, 2022 – Nov 2, 2022
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 62state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to law enforcement
Initial access: valid_credentials

During the incident: Contained the threat by disabling all unauthorized access to our network and restoring our systems as needed
Launched an investigation in consultation with outside cybersecurity professionals
Reported this incident to law enforcement
Changes made: Offering access to Single Bureau Credit Monitoring services at no charge for twelve months
Providing proactive fraud assistance through Cyberscout through Identity Force
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

California State AGDec 23 · first

Massachusetts State AGDec 23 · first

Indiana State AGDec 23 · first

Maine State AGDec 23 · first

Montana State AGDec 23 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-27.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2022
Raw hash: cf54b3494029014ae2d192a9195b8e829db5a9259719282aa48d8b47c7d9959c

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityCincinnati State Technical Community College

Victim entityCincinnati State Technical Community College

Incidentdiscovered Nov 2, 2022

Stated responseContained the threat by disabling all unauthorized access to our network and restoring our systems as needed

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov