DisclosureLens
HackingEducationEducationVulnerability ExploitCustomer Data InvolvedCredentialsIdentity (basic)LowContained

For Inspiration and Recognition of Science and Technology

bd_d5589429d2e9863c · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 6, 2017

Filed

Mar 24, 2017

To disclose

18 days

Affected

Not disclosed

Confidence

64%
Full breach record for For Inspiration and Recognition of Science and Technology →

FIRST (For the Inspiration and Recognition of Science and Technology) disclosed unauthorized access to two externally hosted forums (forums.usfirst.org and ftcforum.usfirst.org) between January 21, 2017, and March 7, 2017. The incident was detected on March 6, 2017. Affected data included usernames, email addresses, dates of birth, and encrypted passwords. FIRST shut down the sites, reset passwords, and implemented additional security measures. No financial or credit card data was involved.

California clockDiscovered Mar 6, 2017 → Notified Mar 24, 201718d ✓ CA 60-day OK18 days discovery → filing

Incident timeline

undetected · 44 days
discovery → filing · 18 days

Jan 21, 2017

Begins

Mar 6, 2017

Discovered

Mar 24, 2017

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.