PhysicalEducationEducationTheftCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

PEPPERDINE UNIVERSITY

bd_d7a8f8d6a2069cdb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 12, 2012

Filed

Dec 11, 2012

To disclose

29 days

Affected

Not disclosed

Confidence

64%

Full breach record for PEPPERDINE UNIVERSITY →

Pepperdine University reported the theft of a password-protected employee laptop on November 11, 2012. The university discovered the theft on November 12, 2012. The compromised data may include names, Social Security numbers, addresses, and dates of birth. The university offered 12 months of credit monitoring and identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 12, 2012 → Notified Dec 6, 201224d ✓ CA 60-day OK29 days discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 29 days

Nov 11, 2012

Begins

Nov 12, 2012

Discovered

Dec 11, 2012

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: PEPPERDINE UNIVERSITY
norm: pepperdine university

Name: PEPPERDINE UNIVERSITY
norm: pepperdine university
Industry: Educationllm

Discovered: Nov 12, 2012
Breach occurred: Nov 11, 2012
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 6, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Contracted with ID Experts to provide FraudStop Credit Edition services free of charge
Provided 12 months of credit monitoring
Provided a $20,000 insurance reimbursement policy
Provided exclusive educational materials and access to fraud resolution representatives
Changes made: Re-doubling efforts to address all known information security concerns
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: CA 60-day OK · 24d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 12, 2012
→ Notified: Dec 6, 2012
24d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 12, 2012 → Notified: Dec 6, 2012	24d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-37218
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 11, 2012
Raw hash: c6d1b57cfb0a37674d2bb33fde57e3e4d0a512108494ee1af0fe8de19d22e00d

Reporting entityPEPPERDINE UNIVERSITY

Victim entityPEPPERDINE UNIVERSITY

Incidentdiscovered Nov 12, 2012

Stated responseContracted with ID Experts to provide FraudStop Credit Edition services free of charge

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov