MalwareEducationEducationRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsEducationMediumContained

Greenville Technical College

bd_6bce9028add9d2e0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 27, 2020

Filed

Sep 18, 2020

To disclose

22 days

Affected

Not disclosed

Confidence

66%

Full breach record for Greenville Technical College →

Greenville Technical College experienced a ransomware attack discovered on August 27, 2020. The incident resulted in system disruption and the exfiltration of personal data including names, SSNs, driver's license numbers, financial account info, and credentials. The College restored systems from backups, engaged forensic specialists, notified law enforcement, and offered 12 months of credit monitoring. No specific affected individual count was disclosed.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 days

Aug 27, 2020

Discovered

Sep 18, 2020

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Greenville Technical College
norm: greenville technical college
Domain: gvltec.edu

Name: Greenville Technical College
norm: greenville technical college
Domain: gvltec.edu
Industry: Educationllm

Discovered: Aug 27, 2020
Materiality determined: —
Notification sent: Sep 18, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountCredentialsEducation
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: notified both state and federal law enforcement

During the incident: Launched an investigation aided by cyber security specialists
Notified both state and federal law enforcement
Secured the services of Epiq to provide access to twelve (12) months of complimentary credit monitoring by TransUnion
Changes made: Securely restore systems and services
Actively working to implement additional security measures to prevent a similar incident from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2020/GreenvilleTechnicalCollege.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 18, 2020
Raw hash: c8100d51449bfeef0c60f5c06fc9b31e2a977ccef454b58f385e2a81ba3d78c4

Reporting entityGreenville Technical College

Victim entityGreenville Technical College

Incidentdiscovered Aug 27, 2020

Stated responseLaunched an investigation aided by cyber security specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov