HackingEducationEducationStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountCriticalContained

Pierce College

bd_c4511479cdc204bd · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 24, 2023

Filed

Sep 8, 2023

To disclose

7 weeks

Affected

155,811state residents only

Linked

3 filings

Confidence

69%

Full breach record for Pierce College →2 incidents on file

Pierce College District notified the Washington AG of a security incident where unauthorized actors accessed files between July 23-24, 2023. The breach affected 155,811 Washington residents, exposing names, SSNs, driver's license numbers, financial account numbers, and dates of birth. Notifications were mailed on October 16, 2023, offering one year of identity protection services.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d7 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 7 weeks / 46 days

Jul 23, 2023

Begins

Jul 24, 2023

Discovered

Sep 8, 2023

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

A leak claim by rhysida about this victim predates this filing by 46 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siterhysidabd_e621a45af5f8aff82023-08-21 · +17dVerified
Leak Siterhysidabd_1b7ecb12375569922023-07-24 · +46dCandidate

Name: BakerHostetler LLP
norm: bakerhostetler
Domain: pierce.ctc.edu

Name: Pierce College
norm: pierce college
Domain: pierce.ctc.edu
Industry: Educationllm

Discovered: Jul 24, 2023
Breach occurred: Jul 23, 2023 – Jul 24, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Oct 16, 2023
Affected individuals: 155,811state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Submitted preliminary incident notification to Washington Attorney GeneralSubmitted supplemental notice with final count and notification letter copy
Initial access: exploit_public_facing

During the incident: Secured its network
Commenced an investigation
Reviewed files containing personal information
Mailed notification letters via United States Postal Service First-Class mail
Offered individuals whose Social Security numbers and/or driver’s license numbers were involved a complimentary one-year membership to identity protection services
Established a dedicated call center for notice recipients
Changes made: Implementing additional security measures to enhance the security of its environment
Implementing additional safeguards and technical security measures to enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: WA AG >30dLeak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA26784.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2023
Raw hash: 5fed08d3d9495c93448bdfbc75584b87f308872ee60cb982a1734015ca96cb39

Linked disclosures

Ransomware claims (2)

Reporting entityBakerHostetler LLP

Victim entityPierce College

Incidentdiscovered Jul 24, 2023

Stated responseSecured its network

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com