AccidentalEducationEducationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDFinancial accountEducationMediumContained

Community College of Allegheny County

bd_760674b30701a3ee · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 27, 2019

Filed

Apr 8, 2019

To disclose

12 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Community College of Allegheny County →

Community College of Allegheny County (CCAC) disclosed a data breach involving former student records. On March 27, 2019, CCAC responded to a Pennsylvania Right to Know Law request by providing spreadsheets. Due to technical failures in the redaction process, personally identifiable information (PII) such as names, student IDs, Social Security Numbers, and unpaid fee amounts was capable of being unmasked and viewed by the requester. CCAC secured the return of the information and notified law enforcement. One New Hampshire resident was affected. CCAC is offering one year of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 days

Mar 27, 2019

Begins

Mar 27, 2019

Discovered

Apr 8, 2019

Filed

vs. sector median

7 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_01500f8b64584ba22019-04-05 · +3dVerified

Name: Community College of Allegheny County
norm: community college of allegheny county

Name: Community College of Allegheny County
norm: community college of allegheny county
Industry: Educationllm

Discovered: Mar 27, 2019
Breach occurred: Mar 27, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 5, 2019
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountEducation
Data elements: Social Security numberDate of birth
Attack vector: Unknown
Regulator citations: Notified local law enforcement authorities

During the incident: Took action to secure the return of the information from that individual
Notified local law enforcement authorities of the incident
Notifying all potentially affected individuals
Changes made: Reviewing its procedures and technology
Provide employee training
Implement additional protocols concerning the handling and disclosure of student information and the utilization of redaction tools and methods
Offering affected individuals one year of identity protection services at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 days(12 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 5 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/community-college-allegheny-county-20190408.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2019
Raw hash: 1e824bef5227727e2e64197785e4f40fb704266d4db36a6dbe7cda1447ed6333

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCommunity College of Allegheny County

Victim entityCommunity College of Allegheny County

Incidentdiscovered Mar 27, 2019

Stated responseTook action to secure the return of the information from that individual

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov