Oak Ridge Associated Universities, Incorporated
bd_964719921d9afe4f · schema v1 · pii pii-v1
Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Cl0p on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Oak Ridge Associated Universities - ORAU
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jul 26, 2023
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Oregon State AGbd_1be1194ec55748642023-08-21 · +26dVerified
- California State AGbd_393e41f072f2bf092023-08-21 · +26dVerified by operator
- Vermont State AGbd_47bcff9365e9eef72023-08-21 · +26dVerified by operator
- Massachusetts State AGbd_6ce30d92e1f562672023-08-21 · +26dVerified by operator
Show 6 more filings ↓Show fewer ↑up to 29d gap
- Montana State AGbd_886bd4fa64f2a2ba2023-08-21 · +26dVerified
- Maine State AGbd_991a0ec14d6a0e3b2023-08-21 · +26dVerified by operator
- New Hampshire State AGbd_d835c740d49937302023-08-21 · +26dVerified by operator
- Indiana State AGbd_decca8f8082609c72023-08-21 · +26dVerified
- Washington State AGbd_fd982dc95fd180e52023-08-21 · +26dVerified
- South Carolina State AGbd_9c88bb16eff983962023-08-24 · +29dVerified
Filing propagation · 11 filings · 10 states
View merged incident ↗Pattern: first filing Jul 26, last Aug 24 (SC) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.