MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Bunker Hill Community College
bd_9f5c133fc96fca16 · schema v1 · pii pii-v1
Full breach record for Bunker Hill Community College →Bunker Hill Community College experienced a ransomware attack in May 2023. On May 23, 2023, irregular activity was detected. An unauthorized actor gained access to the network, deployed ransomware, and copied a limited amount of data including names and other personal information. The incident was contained, and the college engaged experts, contacted law enforcement, and offered 24 months of credit monitoring.
Leak gap clock✗ Leak >180d31 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_81b8c46daafd0abdLeak Sitesnatchfiled 2023-06-14(198d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_6b00e50e35e53affMaine State AGfiled 2023-12-29Verified by operator
- bd_88222e97df170fefVermont State AGfiled 2023-12-29Verified by operator
- bd_9e1c1004db6121b5Montana State AGfiled 2023-12-29Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578568
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2023
- Raw hash
- ff6cc4bc71e4b4a6d9f32bbccbe5ed107fcb59d098be60824c4d8e7c063fd12d
Reporting entity
- Name
- Bunker Hill Community Collegenorm: bunker hill community college
Victim entity
- Name
- Bunker Hill Community Collegenorm: bunker hill community college
Incident
- Discovered
- May 23, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this Incident to relevant government agencies and law enforcement
Compliance
- Time to disclose
- 31 weeks(220 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.