PhysicalProfessional ServicesProfessional ServicesTheftEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Longwood Management Corporation

bd_646821f3c7bdbf45 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2015

Filed

May 11, 2015

To disclose

13 weeks

Affected

Not disclosed

Confidence

64%

Longwood Management Corporation notified the California Attorney General of a data breach involving the theft of an employee's password-protected laptop on February 11, 2015. The laptop contained a file with names, Social Security numbers, positions, and facility locations of individuals. The company engaged forensic investigators and is offering one year of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 89 days

Feb 11, 2015

Begins

Feb 11, 2015

Discovered

May 11, 2015

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Longwood Management Corporation
norm: longwood management
Domain: longwood.edu

Name: Longwood Management Corporation
norm: longwood management
Domain: longwood.edu
Industry: Professional Servicesllm

Discovered: Feb 11, 2015
Breach occurred: Feb 11, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 11, 2015
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Reporting this incident to certain state regulators

During the incident: Reported the burglary to local law enforcement
Launched an investigation into the incident
Retained independent, third-party forensic investigators to assist in our investigation into this incident
Cooperating with law enforcement's investigation into this incident
Reporting this incident to certain state regulators
Providing notice of this incident to you
Offering you access to a complimentary one-year membership to Experian's ProtectMyID Elite credit monitoring and identity restoration product
Changes made: Reviewing our policies and procedures regarding the storage of personal information and security of mobile devices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(89 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-55875
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 11, 2015
Raw hash: 4355eb76498b2e6a369ee810d7e89c428cd2b0bba84a7fe4d8901cf65a333c22

Reporting entityLongwood Management Corporation

Victim entityLongwood Management Corporation

Incidentdiscovered Feb 11, 2015

Stated responseReported the burglary to local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov