HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
For Inspiration and Recognition of Science and Technology
bd_d5589429d2e9863c · schema v1 · pii pii-v1
Full breach record for For Inspiration and Recognition of Science and Technology →For the Inspiration and Recognition of Science and Technology (FIRST) disclosed a data breach affecting its externally hosted forums (forums.usfirst.org and ftcforum.usfirst.org). Unauthorized access occurred between January 21, 2017, and March 7, 2017. The incident compromised usernames, email addresses, dates of birth, and encrypted passwords. FIRST shut down the affected sites, addressed the vulnerability, and reset all participant passwords.
California clockDiscovered Mar 6, 2017 → Notified Mar 24, 201718d ✓ CA 60-day OK18 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-67116
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2017
- Raw hash
- a8adce70cfbc30888c30e2bde916f83647c11758973da9788e858baca1e9e521
Reporting entity
- Name
- For Inspiration and Recognition of Science and Technologynorm: for inspiration and recognition of science and
- Domain
- firstinspires.org
Victim entity
- Name
- For Inspiration and Recognition of Science and Technologynorm: for inspiration and recognition of science and
- Domain
- firstinspires.org
Incident
- Discovered
- Mar 6, 2017
- Materiality determined
- —
- Notification sent
- Mar 24, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 18d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 6, 2017→ Notified: Mar 24, 201718d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.