HackingEducationEducationStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Holmes Community College

bd_889d3b18029354c0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 3, 2022

Filed

Nov 3, 2022

To disclose

13 weeks

Affected

2state residents only

Linked

4 filings

Confidence

65%

Full breach record for Holmes Community College →

Holmes Community College notified individuals of unauthorized access to computer systems discovered on August 3, 2022. The incident potentially impacted names. The college disconnected systems, engaged in investigation, implemented additional security measures, and offered Equifax credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 92 days

Aug 3, 2022

Discovered

Nov 3, 2022

Filed

vs. sector median

+5 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_26ecd106c8f0cae72022-11-03Verified
Massachusetts State AGbd_374e3ebc0ef1d2f02022-11-03Verified
New Hampshire State AGbd_bd14e4032f62049d2022-11-07 · +4dVerified

Name: Holmes Community College
norm: holmes community college

Name: Holmes Community College
norm: holmes community college
Industry: Educationllm

Discovered: Aug 3, 2022
Materiality determined: —
Notification sent: Oct 24, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified federal law enforcementnotified appropriate state and federal regulators
Initial access: valid_credentials

During the incident: Disconnected these systems from the network
Commenced an investigation
Conducted a diligent investigation
Implemented additional technical security measures
Reviewing and enhancing our existing policies and procedures relating to data protection and security
Notified federal law enforcement
Notified appropriate state and federal regulators
Offering you access to credit monitoring and identity theft protection services through Equifax at no cost
Changes made: Implemented additional technical security measures
Reviewing and enhancing our existing policies and procedures relating to data protection and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(92 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGNov 3 · first

Massachusetts State AGNov 3 · first

Montana State AGNov 3 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-685.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 3, 2022
Raw hash: b0379208389ea3c82040797da14d1811aef2b10b8c7718833bf51b4c4f1f6acb

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHolmes Community College

Victim entityHolmes Community College

Incidentdiscovered Aug 3, 2022

Stated responseDisconnected these systems from the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov