HackingEducationEducationStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Pacific Union College

bd_eb6b267241ca6c38 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 19, 2023

Filed

Nov 7, 2023

To disclose

33 weeks

Affected

35state residents only

Linked

9 filings

Confidence

65%

Full breach record for Pacific Union College →2 incidents on file

Pacific Union College notified affected individuals of unauthorized network access occurring between March 5 and March 19, 2023. The incident involved the removal of personal information, including full names. The college engaged outside cybersecurity professionals for investigation and offered complimentary credit monitoring via Experian IdentityWorks to impacted individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 33 weeks / 233 days

Mar 5, 2023

Begins

Mar 19, 2023

Discovered

Nov 7, 2023

Filed

vs. sector median

+25 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitetrigonabd_6033bd183ac097462023-05-30 · +161dVerified

Regulatory filings (7) · sorted by filing gap

California State AGbd_3d77409f4135c7592023-11-07Verified
Massachusetts State AGbd_76165e2332afc30e2023-11-07Verified by operator
Oregon State AGbd_ea10a61c3e970c3a2023-11-07Candidate
Maine State AGbd_fa36af0c7990e4fe2023-11-08 · +1dCandidate

Show 3 more filings ↓up to 9d gap

Vermont State AGbd_9d1dc3ff1d515b8f2023-11-09 · +2dVerified
New Hampshire State AGbd_b961a48bdfa4479b2023-11-13 · +6dVerified
Washington State AGbd_9c39c3895a33ce7e2023-11-16 · +9dVerified by operator

Name: Pacific Union College
norm: pacific union college
Domain: puc.edu

Name: Pacific Union College
norm: pacific union college
Domain: puc.edu
Industry: Educationllm

Discovered: Mar 19, 2023
Breach occurred: Mar 5, 2023 – Mar 19, 2023
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 35state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Offering a complimentary membership of Experian IdentityWorks Credit 3B
Set up a dedicated and confidential toll-free response line
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(233 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

California State AGNov 7 · first

Massachusetts State AGNov 7 · first

Oregon State AGNov 7 · first

Montana State AGNov 7 · first · this page

Maine State AG+1d

Vermont State AG+2d

New Hampshire State AG+6d

Washington State AG+9d

Pattern: first filing Nov 7 (CA), last Nov 16 (WA) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-854.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 7, 2023
Raw hash: c057ad6358b60b24228d6c4efc344b3c4fed3f77a4376facbec8ac40236bfd4d

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityPacific Union College

Victim entityPacific Union College

Incidentdiscovered Mar 19, 2023

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov