MalwareEducationEducationRansomwareRansom DemandedPIIIdentity (basic)LowContained

Columbia College of Chicago

bd_6c1e0586edfbf607 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 30, 2020

Filed

Jul 15, 2020

To disclose

7 weeks

Affected

1state residents only

Linked

8 filings

Confidence

66%

Full breach record for Columbia College of Chicago →

Columbia College Chicago notified Montana residents of a ransomware attack discovered on May 30, 2020. The incident resulted in unauthorized access to personal information including names. The college engaged forensic investigators and offered one year of credit monitoring. Remediation included MFA implementation and removing local admin rights.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 46 days

May 30, 2020

Begins

May 30, 2020

Discovered

Jul 15, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenetwalkerbd_1dda001098a673f82020-06-03 · +42dCandidate

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_3ef7d979c74a98922020-07-15Verified
Indiana State AGbd_82e118f1ea9b222b2020-07-15Verified by operator
New Hampshire State AGbd_b2f2e5126ba2b5e62020-07-15Candidate
New Hampshire State AGbd_7f8012c92f50029b2020-07-29 · +14dCandidate

Show 2 more filings ↓up to 231d gap

Illinois State AGbd_a7c6c1477885762d2020-01-01 · +196dVerified by operator
Massachusetts State AGbd_c6d1e8dc0429f8322019-11-27 · +231dVerified by operator

Name: Columbia College of Chicago
norm: columbia college of chicago

Name: Columbia College of Chicago
norm: columbia college of chicago
Industry: Educationllm

Discovered: May 30, 2020
Breach occurred: May 30, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 1, 2020
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Engaged a third-party computer forensics firm to conduct a thorough investigation
Arranged for you to enroll, at no cost to you, in an online credit monitoring service (myTrueIdentity) for one year provided by TransUnion Interactive
Changes made: Implementing a remote monitoring tool on all Columbia owned devices to prevent the execution of any malware or ransomware
Implementing multifactor authentication
Removing local administrative rights
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Massachusetts State AGNov 27 · first

Illinois State AG+35d

Massachusetts State AG+231d

Indiana State AG+231d

New Hampshire State AG+231d

Montana State AG+231d · this page

New Hampshire State AG+245d

Pattern: first filing Nov 27 (MA), last Jul 29 (NH) — a 245-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Columbia-College-Chicago-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2020
Raw hash: e5fce573b336c2b66d573ab7612b2b44b9bc896e4cffecd420cf0fdb80793327

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityColumbia College of Chicago

Victim entityColumbia College of Chicago

Incidentdiscovered May 30, 2020

Stated responseEngaged a third-party computer forensics firm to conduct a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov