MalwareEducationEducationRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)LowContained

Clackamas Community College

bd_ac2e47df35a2c54d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 19, 2024

Filed

Apr 1, 2024

To disclose

10 weeks

Affected

11state residents only

Linked

7 records

Confidence

66%

Full breach record for Clackamas Community College →2 incidents on file

Clackamas Community College notified affected individuals on April 1, 2024, of a ransomware incident detected on January 19, 2024. Unauthorized access led to file encryption and exfiltration of names. The college isolated systems, engaged forensic experts, and notified federal law enforcement. Identity theft protection services were offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d10 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 10 weeks / 73 days

Jan 19, 2024

Discovered

Apr 1, 2024

Filed

This filing is one of 7 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 62 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_d2582e60593a5be92024-01-19 · +73dVerified by operator

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_0e34364031db69162024-04-01Candidate
New Hampshire State AGbd_232ecac7dbf4f6312024-04-01Verified by operator
Maine State AGbd_d05039a6b2f397ed2024-04-01Verified
Indiana State AGbd_fc885ebcb1e64b602024-04-01Verified by operator

Show 1 more filing ↓up to 2d gap

Massachusetts State AGbd_a2f4de4c883974cf2024-04-03 · +2dVerified by operator

Name: Clackamas Community College
norm: clackamas community college
Domain: clackamas.edu

Name: Clackamas Community College
norm: clackamas community college
Domain: clackamas.edu
Industry: Educationllm

Discovered: Jan 19, 2024
Materiality determined: —
Notification sent: Apr 1, 2024
Affected individuals: 11state-resident count only
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Activated our incident response plan
Launched an investigation in consultation with a team of forensic experts
Notified federal law enforcement
Cooperating with that investigation
Isolated our network
Moved systems offline
Disabled user access
Offering identity theft protection services through IDX
Changes made: Evaluating additional measures we can take to mitigate the risk of a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGApr 1 · first

New Hampshire State AGApr 1 · first

Maine State AGApr 1 · first

Indiana State AGApr 1 · first

Montana State AGApr 1 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1257.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2024
Raw hash: e5712ca17377804c7271b3fc92e845caba9cffdad0af04cb7ac85e85feb54b2d

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityClackamas Community College

Victim entityClackamas Community College

Incidentdiscovered Jan 19, 2024

Stated responseActivated our incident response plan

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov