MalwareEducationEducationRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)LowContained

Clackamas Community College

bd_ac2e47df35a2c54d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 19, 2024

Filed

Apr 1, 2024

To disclose

10 weeks

Affected

11state residents only

Linked

8 filings

Confidence

66%

Full breach record for Clackamas Community College →2 incidents on file

Clackamas Community College notified affected individuals on April 1, 2024, of a ransomware incident detected on January 19, 2024. Unauthorized access led to file encryption and exfiltration of names. The college isolated systems, engaged forensic experts, and notified federal law enforcement. Identity theft protection services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 73 days

Jan 19, 2024

Discovered

Apr 1, 2024

Filed

vs. sector median

on median

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelockbit_3bd_34ad70b0be0db2ac2024-01-30 · +62dVerified by operator
Leak Sitelockbit_3bd_d2582e60593a5be92024-01-19 · +73dVerified by operator

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_0e34364031db69162024-04-01Candidate
New Hampshire State AGbd_232ecac7dbf4f6312024-04-01Verified by operator
Maine State AGbd_d05039a6b2f397ed2024-04-01Verified
Indiana State AGbd_fc885ebcb1e64b602024-04-01Verified by operator

Show 1 more filing ↓up to 2d gap

Massachusetts State AGbd_a2f4de4c883974cf2024-04-03 · +2dVerified by operator

Name: Clackamas Community College
norm: clackamas community college
Domain: clackamas.edu

Name: Clackamas Community College
norm: clackamas community college
Domain: clackamas.edu
Industry: Educationllm

Discovered: Jan 19, 2024
Materiality determined: —
Notification sent: Apr 1, 2024
Affected individuals: 11state-resident count only
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Activated our incident response plan
Launched an investigation in consultation with a team of forensic experts
Notified federal law enforcement
Cooperating with that investigation
Isolated our network
Moved systems offline
Disabled user access
Offering identity theft protection services through IDX
Changes made: Evaluating additional measures we can take to mitigate the risk of a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGApr 1 · first

New Hampshire State AGApr 1 · first

Maine State AGApr 1 · first

Indiana State AGApr 1 · first

Montana State AGApr 1 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1257.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2024
Raw hash: e5712ca17377804c7271b3fc92e845caba9cffdad0af04cb7ac85e85feb54b2d

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityClackamas Community College

Victim entityClackamas Community College

Incidentdiscovered Jan 19, 2024

Stated responseActivated our incident response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov