Social EngineeringEducationEducationPhishingBECEmployee Data InvolvedTargetedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Virginia Wesleyan College

bd_b1765f8869dcd97e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 15, 2017

Filed

Feb 28, 2017

To disclose

13 days

Affected

1state residents only

Confidence

66%

Full breach record for Virginia Wesleyan College →

Virginia Wesleyan College notified the NH Attorney General of a spear-phishing incident on February 15, 2017, where an employee responded to a fraudulent email requesting W-2 information. The employee attached 2016 W-2 forms containing names, addresses, Social Security numbers, and earnings for current and former employees. One New Hampshire resident was affected. The College notified the FBI, IRS, and state authorities, and offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 days

Feb 15, 2017

Begins

Feb 15, 2017

Discovered

Feb 28, 2017

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Virginia Wesleyan College
norm: virginia wesleyan college

Name: Virginia Wesleyan College
norm: virginia wesleyan college
Industry: Educationllm

Discovered: Feb 15, 2017
Breach occurred: Feb 15, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 16, 2017
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountEmployment
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified the FBINotified the IRSNotified state taxing authorities
Initial access: phishing_link

During the incident: Notified the FBI, IRS, and state taxing authorities
Notified current employees by email notice
Mailed letters to current and past affected employees
Offering potentially affected individuals access to two (2) years of free credit monitoring and identity restoration services through Experian’s ProtectMyID Alert product
Changes made: Analyzing where process changes are needed and will take the appropriate actions
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/virginia-wesleyan-20170228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2017
Raw hash: 00a10d6d1550a015d0ed939174c4bf5520d3e6828022344064d0e15c1da873e9

Reporting entityVirginia Wesleyan College

Victim entityVirginia Wesleyan College

Incidentdiscovered Feb 15, 2017

Stated responseNotified the FBI, IRS, and state taxing authorities

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov