HackingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
CHEGG, INC.
bd_83a5a8d4b2a2787d · schema v1 · pii pii-v1
Full breach record for CHEGG, INC. →Chegg, Inc. notified the California Attorney General that an outside hacker illegally obtained employee information for approximately 700 current and former U.S. employees on or about April 9, 2020. The company discovered the incident on April 10, 2020. The compromised data included names and Social Security numbers. Chegg retained a third-party forensic firm, notified law enforcement, and is offering two years of free credit monitoring and identity theft protection through Experian.
California clockDiscovered Apr 10, 2020 → Notified Apr 28, 202018d ✓ CA 60-day OK17 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed700 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-189475
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 27, 2020
- Raw hash
- 38515e4ca7e9074d6f303262184d998fa487f471117dd1b1b15d592b05e04252
Reporting entity
- Name
- CHEGG, INC.norm: chegg
- Domain
- chegg.com
Victim entity
- Name
- CHEGG, INC.norm: chegg
- Domain
- chegg.com
Incident
- Discovered
- Apr 10, 2020
- Materiality determined
- —
- Notification sent
- Apr 28, 2020
- Affected individuals
- 700
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 18d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 10, 2020→ Notified: Apr 28, 202018d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.