HackingEducationEducationStolen CredentialsEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Delta Career Education Corporation

bd_6a11fd11bb8be9f0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2017

Filed

Apr 14, 2017

To disclose

9 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for Delta Career Education Corporation →2 incidents on file

Delta Career Education Corporation notified the California Attorney General of a data breach affecting current and former employees. Suspicious activity was detected in an email account on February 13, 2017. The investigation determined that unauthorized persons may have accessed names, addresses, and Social Security numbers. The company engaged a security firm, contained the incident, and offered one year of identity protection services. Remediation included enhanced two-factor authentication.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 13, 2017 → Notified Apr 12, 201758d ✓ CA 60-day OK9 weeks discovery → filing

Incident timeline

discovery → filing · 9 weeks / 60 days

Feb 13, 2017

Begins

Feb 13, 2017

Discovered

Apr 14, 2017

Filed

vs. sector median

on median

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_6febbf53ae84ec202017-04-14Candidate
New Hampshire State AGbd_aaaeb961e18b271b2017-04-14Verified
Massachusetts State AGbd_ac73876cce37c4dc2017-04-14Verified
South Carolina State AGbd_68909de8ffb615192017-04-17 · +3dVerified

Name: Delta Career Education Corporation
norm: delta career education

Name: Delta Career Education Corporation
norm: delta career education
Industry: Educationllm

Discovered: Feb 13, 2017
Breach occurred: Feb 13, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 12, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged a leading computer security firm to determine the nature and extent of the incident
Providing you with a complimentary one-year membership of Experian’s ProtectMyID Alert
Changes made: Implemented improved security measures including additional controls relating to safeguarding personal information
Enhanced two-factor authentication for employee logins
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: CA 60-day OK · 58d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 13, 2017
→ Notified: Apr 12, 2017
58d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 13, 2017 → Notified: Apr 12, 2017	58d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGApr 14 · first

New Hampshire State AGApr 14 · first

Massachusetts State AGApr 14 · first

California State AGApr 14 · first · this page

South Carolina State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-67632
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2017
Raw hash: 7bcb406571a6d4b87c5f87ee7a91c704f743509361c905c1c2436c3ce3e9f3ef

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDelta Career Education Corporation

Victim entityDelta Career Education Corporation

Incidentdiscovered Feb 13, 2017

Stated responseEngaged a leading computer security firm to determine the nature and extent of the incident

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov