HackingEducationEducationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)EmploymentLowContained

George Fox University

bd_bb04bf42da8737eb · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 11, 2017

Filed

Apr 21, 2017

To disclose

10 days

Affected

2state residents only

Linked

3 filings

Confidence

65%

George Fox University disclosed a data breach where an individual gained unauthorized access to a portion of the university’s W-2 tax forms for the 2016 tax year. The incident occurred on January 16, 2017, and was identified on April 11, 2017. Affected data included personal information of employees who did not opt for electronic W-2s. The university notified law enforcement, the FBI, IRS, and Oregon Department of Revenue, and provided one year of identity monitoring services via Kroll to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 85 days

discovery → filing · 10 days

Jan 16, 2017

Begins

Apr 11, 2017

Discovered

Apr 21, 2017

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_11be9d26efa61adc2017-04-21Verified
HHS OCRbd_412db760e60d76852017-04-21Verified

Name: George Fox University
norm: george fox
Domain: lifespan-roch.org

Name: George Fox University
norm: george fox
Domain: lifespan-roch.org
Industry: Educationllm

Discovered: Apr 11, 2017
Breach occurred: Jan 16, 2017
Undetected for: 85 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Employment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified local law enforcementNotified the Federal Bureau of InvestigationNotified the Oregon Department of RevenueNotified the Internal Revenue Service (IRS)
Initial access: valid_credentials

During the incident: Notified local law enforcement
Notified the Federal Bureau of Investigation
Notified the Oregon Department of Revenue
Notified the Internal Revenue Service (IRS)
Worked with the IRS to flag affected employees’ taxpayer records
Communicated with software vendor
Invested in new monitoring tools
Changes made: Implemented a permanent resolution to address the incident
Invested in new monitoring tools to improve proactive identification of future threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGApr 21 · first

HHS OCRApr 21 · first

Montana State AGApr 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/George-Fox-University.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 21, 2017
Raw hash: bad8326c975eed1b432c5fcaa61dc2559e8cdb8027424cf81feeb43cb0f8ba5a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityGeorge Fox University

Victim entityGeorge Fox University

Incidentdiscovered Apr 11, 2017

Stated responseNotified local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov