HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Clackamas Community College
bd_d05039a6b2f397ed · schema v1 · pii pii-v1
Full breach record for Clackamas Community College →Clackamas Community College experienced an external system breach (hacking) on January 18, 2024, discovered on February 29, 2024. The incident affected 8,797 individuals, including 3 Maine residents. Personal information acquired included names and Social Security Numbers. The college provided 12 months of credit monitoring through IDX/ZeroFox.
Maine clockDiscovered Feb 29, 2024 → Filed with AG Apr 1, 202432d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 73 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_34ad70b0be0db2acLeak Sitelockbit_3filed 2024-01-30(62d gap)Verified
- bd_d2582e60593a5be9Leak Sitelockbit_3filed 2024-01-19(73d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_0e34364031db6916Oregon State AGfiled 2024-04-01Candidate
- bd_ac2e47df35a2c54dMontana State AGfiled 2024-04-01Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bf80e22d-404e-4a33-b450-0009b48da775.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2024
- Raw hash
- 3aafb537c219c95da148876b9edf541bb542df35843ae9b64629a993173c1e6c
Reporting entity
- Name
- Clackamas Community Collegenorm: clackamas community college
- Domain
- clackamas.edu
- Industry
- education
Victim entity
- Name
- Clackamas Community Collegenorm: clackamas community college
- Domain
- clackamas.edu
- Industry
- education
Incident
- Discovered
- Feb 29, 2024
- Materiality determined
- —
- Notification sent
- Apr 1, 2024
- Affected individuals
- 8,797
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32dLeak >30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 29, 2024→ Filed with AG: Apr 1, 202432d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.