HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
The Savannah College Of Art And Design, Inc.
bd_eb968d72925d9e48 · schema v1 · pii pii-v1
Full breach record for The Savannah College Of Art And Design, Inc. →The Savannah College of Art and Design (SCAD) notified the California Attorney General of a data breach. Unauthorized activity was identified on August 22, 2022, with access occurring between August 21 and August 22, 2022. An unauthorized person gained access to the network and acquired copies of files containing personal information. SCAD contained the incident, engaged a cybersecurity firm, and notified law enforcement. Affected individuals were offered one year of complimentary identity theft protection through Experian.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_34b8f401d5dd864dNew Hampshire State AGfiled 2022-09-21Verified
- bd_4d98e0839991c18fMaine State AGfiled 2022-09-21Candidate
- bd_6f5c6ce7a7e92adaMontana State AGfiled 2022-09-21Candidate
- bd_343ef8796edb131dWashington State AGfiled 2022-09-22(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-557489
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 21, 2022
- Raw hash
- b33bd0c218ea197aeaa6410bc448eb9f9f4655c2884a34a6f3fef296902efe9c
Reporting entity
- Name
- The Savannah College Of Art And Design, Inc.norm: the savannah college of art and design
Victim entity
- Name
- The Savannah College Of Art And Design, Inc.norm: the savannah college of art and design
Incident
- Discovered
- Aug 22, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.