HackingEducationEducationStolen CredentialsTargetedIdentity (basic)Government IDFinancial accountMediumContained

International Center of Photography

bd_8a9e8ea0e8a06b6f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 16, 2023

Filed

Feb 8, 2024

To disclose

51 weeks

Affected

4state residents only

Linked

6 filings

Confidence

67%

Full breach record for International Center of Photography →2 incidents on file

The International Center of Photography (ICP) notified affected individuals of a cybersecurity incident discovered on February 16, 2023. An unauthorized individual accessed ICP's network, potentially viewing or taking files containing personal information including names, addresses, SSNs, passport numbers, and bank account numbers. ICP engaged cybersecurity specialists for investigation and conducted a manual review to identify affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 51 weeks / 357 days

Feb 16, 2023

Discovered

Feb 8, 2024

Filed

vs. sector median

+42 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_c32352414d8bfcf42023-02-19 · +354dVerified by operator

Regulatory filings (4) · sorted by filing gap

Delaware State AGbd_75abf37bcfdf2f052024-02-07 · +1dVerified
Maine State AGbd_e2ef7dae4dfb60eb2024-02-07 · +1dCandidate
New Hampshire State AGMedusabd_0e29c34fc9df6ae02024-02-15 · +7dVerified
Indiana State AGbd_cbee27979400d8092024-02-28 · +20dVerified

Name: International Center of Photography
norm: international center of photography
Domain: icp.org

Name: International Center of Photography
norm: international center of photography
Domain: icp.org
Industry: Educationllm

Discovered: Feb 16, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation into the nature and scope of the incident with the assistance of industry-leading cybersecurity specialists
Conducted a comprehensive review of the impacted files with third-party support
Conducted a manual review of our records internally to confirm the identities of individuals potentially affected
Changes made: Evaluating opportunities to improve security and to better prevent future events of this kind
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(357 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Delaware State AGFeb 7 · first

Maine State AGFeb 7 · first

Montana State AG+1d · this page

New Hampshire State AG+8d

Indiana State AG+21d

Pattern: first filing Feb 7 (DE), last Feb 28 (IN) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1087.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 8, 2024
Raw hash: 8d1431a6102ef8620e59572699d05c48b395fb604f8668fe40c1b8225850fa44

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityInternational Center of Photography

Victim entityInternational Center of Photography

Incidentdiscovered Feb 16, 2023

Stated responseLaunched an investigation into the nature and scope of the incident with the assistance of industry-leading cybersecurity specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov