MisuseEducationEducationPrivilege AbuseCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

O'Reilly School of Technology (O'Reilly Media Group)

bd_a139df0425a20e9c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2016

Filed

Apr 1, 2016

To disclose

7 weeks

Affected

3state residents only

Confidence

65%

Full breach record for O'Reilly School of Technology (O'Reilly Media Group) →

O'Reilly School of Technology (a subsidiary of O'Reilly Media, Inc.) notified Montana regulators of a data breach discovered on Feb 11, 2016. An OST student copied a private database backup on Nov 13, 2015, containing names, SSNs, emails, phone numbers, birth dates, and addresses of OST students. The incident was not deemed malicious. OST systems were shut down. Affected individuals were offered one year of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 90 days

discovery → filing · 7 weeks / 50 days

Nov 13, 2015

Begins

Feb 11, 2016

Discovered

Apr 1, 2016

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: O'Reilly School of Technology (O'Reilly Media Group)
norm: o reilly school of technology o reilly media
Domain: oreilly.com

Name: O'Reilly School of Technology (O'Reilly Media Group)
norm: o reilly school of technology o reilly media
Industry: Educationllm

Discovered: Feb 11, 2016
Breach occurred: Nov 13, 2015
Undetected for: 90 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 1, 2016
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: Internal
Initial access: insider_action

During the incident: Initiated containment response
Engaged outside experts for input
Retained a single copy of the database backup file in a highly secure environment for forensic purposes
Shut down OST business computer systems and networks
Offered one year of identity theft protection and recovery services through IdentityForce
Changes made: Improving information security practices, policies, and controls
Identifying forward-looking protocol and process changes
Monitoring other areas of network for ongoing risk
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OReilly-School-of-Technology.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2016
Raw hash: 55925bb4d681e68476e00329e1be8af3a575ccc9bfa9aa0acaa24ff796235672

Reporting entityO'Reilly School of Technology (O'Reilly Media Group)

Victim entityO'Reilly School of Technology (O'Reilly Media Group)

Incidentdiscovered Feb 11, 2016

Stated responseInitiated containment response

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov