HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTPHIMediumContained
Linn-Benton Community College
bd_a5b6b92b2724ec47 · schema v1 · pii pii-v1
Full breach record for Linn-Benton Community College →Chemeketa Community College notified that its third-party administrator, Carruth Compliance Consulting, experienced a data security incident on Dec 21, 2024. Unauthorized access may have exposed names, SSNs, financial account info, driver's licenses, W-2s, and medical billing info. The FBI was notified. Affected individuals are offered 24 months of credit monitoring and identity theft protection through IDX.
Vermont clock⏱ VT AG >14 bday10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_0ce41b3eecfd9cfcIndiana State AGfiled 2025-02-28Verified
- bd_24ff7c40fadd2830Indiana State AGfiled 2025-02-28Verified
- bd_28c86a7560489d55Maryland State AGfiled 2025-02-28Verified
- bd_37605f8c85948e97Oregon State AGfiled 2025-02-28Candidate
Show 4 more filings ↓Show fewer ↑up to 3d gap
- bd_4e55ac9e8ebb6419Maine State AGfiled 2025-02-28Verified
- bd_b04b139c5bfa404fMaine State AGfiled 2025-02-28Verified
- bd_fa9e8b93c46d18fdMontana State AGfiled 2025-02-28Verified
- bd_4ae1c2ff7b6ddf37Oregon State AGfiled 2025-03-03(3d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-28-chemeketa-community-college-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- 20185f9075aa4d56bb189c944e29015d7fdf6978b62cb41c8662b8b2aef075a8
Reporting entity
- Name
- Linn-Benton Community Collegenorm: linn benton community college
- Domain
- linnbenton.edu
Victim entity
- Name
- Linn-Benton Community Collegenorm: linn benton community college
- Domain
- linnbenton.edu
Incident
- Discovered
- Dec 21, 2024
- Materiality determined
- Feb 28, 2025
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.