MalwareEducationEducationRansomwareRansom DemandedPIIIdentity (basic)LowContained

Columbia College of Chicago

bd_6c1e0586edfbf607 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 30, 2020

Filed

Jul 15, 2020

To disclose

7 weeks

Affected

1state residents only

Linked

7 records

Confidence

66%

Full breach record for Columbia College of Chicago →2 incidents on file

Columbia College Chicago notified Montana residents of a ransomware attack discovered on May 30, 2020. The incident resulted in unauthorized access to personal information including names. The college engaged forensic investigators and offered one year of credit monitoring. Remediation included MFA implementation and removing local admin rights.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 7 weeks / 46 days

May 30, 2020

Begins

May 30, 2020

Discovered

Jul 15, 2020

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by netwalker about this victim was first seen 42 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenetwalkerbd_1dda001098a673f82020-06-03 · +42dCandidate

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_3ef7d979c74a98922020-07-15Verified
Indiana State AGbd_82e118f1ea9b222b2020-07-15Verified by operator
New Hampshire State AGbd_b2f2e5126ba2b5e62020-07-15Candidate
New Hampshire State AGbd_7f8012c92f50029b2020-07-29 · +14dCandidate

Show 1 more filing ↓up to 196d gap

Illinois State AGbd_a7c6c1477885762d2020-01-01 · +196dVerified by operator

Name: Columbia College of Chicago
norm: columbia college of chicago

Name: Columbia College of Chicago
norm: columbia college of chicago
Industry: Educationllm

Discovered: May 30, 2020
Breach occurred: May 30, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 1, 2020
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Engaged a third-party computer forensics firm to conduct a thorough investigation
Arranged for you to enroll, at no cost to you, in an online credit monitoring service (myTrueIdentity) for one year provided by TransUnion Interactive
Changes made: Implementing a remote monitoring tool on all Columbia owned devices to prevent the execution of any malware or ransomware
Implementing multifactor authentication
Removing local administrative rights
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+196d

Indiana State AG+196d

New Hampshire State AG+196d

Montana State AG+196d · this page

New Hampshire State AG+210d

Pattern: first filing Jan 1 (IL), last Jul 29 (NH) — a 210-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Columbia-College-Chicago-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2020
Raw hash: e5fce573b336c2b66d573ab7612b2b44b9bc896e4cffecd420cf0fdb80793327

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityColumbia College of Chicago

Victim entityColumbia College of Chicago

Incidentdiscovered May 30, 2020

Stated responseEngaged a third-party computer forensics firm to conduct a thorough investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov