HackingEducationEducationEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Palomar Community College District

bd_cb30c8681aa32a9e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 19, 2017

Filed

Jan 30, 2017

To disclose

11 days

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Palomar Community College District →

Palomar Community College District notified employees that an unauthorized individual accessed a network containing IRS Form W-2s. The breach occurred on January 5, 2017, and was discovered on January 19, 2017. Affected data included names, addresses, and Social Security numbers. The district contained the incident, notified law enforcement and tax authorities, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 11 days

Jan 5, 2017

Begins

Jan 19, 2017

Discovered

Jan 30, 2017

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_30464c09e12d6bed2017-01-30Candidate
Massachusetts State AGbd_d60465476ef780e02017-02-03 · +4dCandidate

Name: Palomar Community College District
norm: palomar community college district

Name: Palomar Community College District
norm: palomar community college district
Industry: Educationllm

Discovered: Jan 19, 2017
Breach occurred: Jan 5, 2017
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the FBINotified the IRSNotified state taxing authorities

During the incident: Immediately began an investigation
Contacted law enforcement
Stopped the incident
Notified the FBI, IRS, and state taxing authorities
Offering a complimentary one-year membership of Experian’s ProtectMyID Alert
Changes made: Taking steps to further strengthen the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Massachusetts State AGJan 30 · first

California State AGJan 30 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-66102
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2017
Raw hash: 36b9bdfe411d0f9847d30a347ed324de9b2b7663c3eaf5b90dcd8a49ef4457b0

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPalomar Community College District

Victim entityPalomar Community College District

Incidentdiscovered Jan 19, 2017

Stated responseImmediately began an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov