HackingEducationEducationStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryEducationFinancial accountIdentity (basic)Government IDHighContained

Centralia College

bd_920c9d61915d4fb4 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 14, 2022

Filed

Aug 12, 2022

To disclose

26 weeks

Affected

38,418state residents only

Linked

7 records

Confidence

69%

Full breach record for Centralia College →2 incidents on file

Centralia College notified Washington AG of unauthorized access to its network between Jan 19 and Feb 14, 2022. Data removed included names, DOBs, SSNs, Student IDs, and financial account info. 38,418 Washington residents affected. Notification sent Aug 3, 2022. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d26 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 26 days

discovery → filing · 26 weeks / 179 days

Jan 19, 2022

Begins

Feb 14, 2022

Discovered

Aug 12, 2022

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by lockbit2 about this victim was first seen 174 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit2bd_3f31b491c1832aab2022-02-19 · +173dVerified by operator

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_c2b01467e0a27a422022-08-08 · +4dVerified
Montana State AGbd_1883a402ccd0af8b2022-08-03 · +9dCandidate
Maine State AGbd_3460524868fbe6952022-08-03 · +9dVerified by operator
Massachusetts State AGbd_786af0b162beb1632022-08-03 · +9dVerified by operator

Show 1 more filing ↓up to 9d gap

Indiana State AGbd_86b07e65699342b72022-08-03 · +9dVerified by operator

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Centralia College
norm: centralia college
Domain: centralia.edu
Industry: Educationllm

Discovered: Feb 14, 2022
Breach occurred: Jan 19, 2022 – Feb 14, 2022
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 3, 2022
Affected individuals: 38,418state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberFinancial account numberDate of birthStudent ID number
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General Consumer Protection Division
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Providing the affected residents with written notification
Providing 12 months of credit monitoring to any resident whose Social Security number was impacted
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(179 days from discovery to filing)
Compliance flags: WA AG >90dLeak >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGAug 3 · first

Maine State AGAug 3 · first

Massachusetts State AGAug 3 · first

Indiana State AGAug 3 · first

New Hampshire State AG+5d

Washington State AG+9d · this page

Pattern: first filing Aug 3 (MT), last Aug 12 (WA) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM14521.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 12, 2022
Raw hash: f0846e087d39042ad8128991bb4912e26e862a377c9f70794c0bff5496d9179a

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityCentralia College

Incidentdiscovered Feb 14, 2022

Stated responseCommenced a prompt and thorough investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com