HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICLowContained
Lewis & Clark College
bd_c5dfb315143fa4e0 · schema v1 · pii pii-v1
Full breach record for Lewis & Clark College →Lewis and Clark College detected unauthorized access to its network on March 3, 2023. Investigation determined bad actors took data on or about February 28, 2023. On February 24, 2024, the college determined impacted files contained personal information. The college engaged external cybersecurity professionals, secured the network, and is providing complimentary identity theft protection services. No specific data types were listed in the redacted notice, but PII is implied.
California clockDiscovered Mar 3, 2023 → Notified Mar 22, 2024385d ✗ CA 60-day late13 months discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_08ba5d52cb14a1eaIndiana State AGfiled 2024-03-22Verified
- bd_555bae41e4bfd13eMaine State AGfiled 2024-03-22Candidate
- bd_6847154486297be4Montana State AGfiled 2024-03-22Candidate
- bd_b3440705167749c2Vermont State AGfiled 2024-03-22Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-582901
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2024
- Raw hash
- ce11ec6224c026b55d76ce947e4d13a8bb9e8a8d312ff036ba20b0ca83157ad1
Reporting entity
- Name
- Lewis & Clark Collegenorm: lewis clark college
- Domain
- lclark.edu
Victim entity
- Name
- Lewis & Clark Collegenorm: lewis clark college
- Domain
- lclark.edu
Incident
- Discovered
- Mar 3, 2023
- Materiality determined
- —
- Notification sent
- Mar 22, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 13 months(385 days from discovery to filing)
- Compliance flags
- CA 60-day late · 385d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 3, 2023→ Notified: Mar 22, 2024385d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.