MalwareOtherMalware OtherDelayed DiscoveryMedium
National Board for Certified Counselors, Inc.
bd_8c92c2d72fb93b57 · schema v1 · pii pii-v1
Full breach record for National Board for Certified Counselors, Inc. →National Board for Certified Counselors, Inc., a non-profit/charity sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2020-09-07 and filed notice on 2021-01-12. 9,898 Washington residents were affected. 127 days elapsed between awareness and notification. 7 days to identify the breach. 0 days to contain the breach.
Washington clock✗ WA AG >90d18 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2c41a7e342598fe9Montana State AGfiled 2021-01-12Candidate
- bd_3b308b49ee1b5741Maine State AGfiled 2021-01-12Verified
- bd_3e380c527a1439a3California State AGfiled 2021-01-12Verified
- bd_af7418f535af9665Delaware State AGfiled 2021-01-12Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_ed724bb2b0de3c04South Carolina State AGfiled 2021-01-13(1d gap)Verified
Source provenance
- Source URL
- https://data.wa.gov/resource/sb4j-ca4h.json?id=10388
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2021
- Raw hash
- 41db489138f87f5dec426c0c09cf48b9d0ee2d55dc2f4654ff8ae5e45b7cfc0c
Reporting entity
- Name
- National Board for Certified Counselors, Inc.norm: national board for certified counselors
Victim entity
- Name
- National Board for Certified Counselors, Inc.norm: national board for certified counselors
- Industry
- Otherllm
Incident
- Discovered
- Sep 7, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 9,898
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 18 weeks(127 days from discovery to filing)
- Compliance flags
- WA AG >90d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.