MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICEDUCATIONMediumContained
R3 Education
bd_ba7f4c07ddee5ab4 · schema v1 · pii pii-v1
Full breach record for R3 Education →R3 Education Inc. detected unusual network activity on November 7, 2023, leading to the discovery of unauthorized access and encryption of data by an unknown party. The incident potentially exposed personal information including names, dates of birth, government IDs, medical/health information, and student IDs. R3 disconnected network access, investigated the scope, and is providing credit monitoring services to affected individuals. No evidence of data misuse was found.
California clockDiscovered Nov 7, 2023 → Notified Mar 25, 2024139d ✗ CA 60-day late29 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_9e69937e0c530840New Hampshire State AGfiled 2024-05-28Verified
- bd_aa05df0b3364d3e0Maine State AGfiled 2024-05-28Verified
- bd_e1c177816da456d5Montana State AGfiled 2024-05-24(4d gap)Candidate
- bd_e0a16b5a6841313cIndiana State AGfiled 2024-03-25(64d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-586061
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2024
- Raw hash
- 064e1aa4770a18b561862a977d63520650080238f528aaf110287afbfe39e04b
Reporting entity
- Name
- R3 Educationnorm: r3 education
Victim entity
- Name
- R3 Educationnorm: r3 education
Incident
- Discovered
- Nov 7, 2023
- Materiality determined
- —
- Notification sent
- Mar 25, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICEDUCATION
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
Compliance
- Time to disclose
- 29 weeks(203 days from discovery to filing)
- Compliance flags
- CA 60-day late · 139d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 7, 2023→ Notified: Mar 25, 2024139d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.