AccidentalMisdeliveryEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Academy of Art University
bd_5ca941b7c82c9347 · schema v1 · pii pii-v1
Full breach record for Academy of Art University →Academy of Art University (dba Stephens Institute) notified employees of a data breach on November 17, 2017. On November 8, 2017, an employee mistakenly sent an internal email containing an attachment with a spreadsheet tab listing employees' first names, last names, and Social Security numbers. The email was sent only to internal Academy employees. The university recalled the email, requested deletion of the file, and offered two years of complimentary Experian identity protection services.
California clockDiscovered Nov 8, 2017 → Notified Nov 17, 20179d ✓ CA 60-day OK9 days discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9b1983e1d1c78a7aMontana State AGfiled 2017-11-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-110849
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2017
- Raw hash
- c6133aebdf2d434b69f5852e095805c5e6a0fef034142e5102af81b97ef5664b
Reporting entity
- Name
- Academy of Art Universitynorm: academy of art university
- Domain
- academyart.edu
Victim entity
- Name
- Academy of Art Universitynorm: academy of art university
- Domain
- academyart.edu
Incident
- Discovered
- Nov 8, 2017
- Materiality determined
- —
- Notification sent
- Nov 17, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- Threat actor
- Internal
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 9d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 8, 2017→ Notified: Nov 17, 20179d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.