Social EngineeringEducationEducationPhishingEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumContained

Solano College

bd_ec689289be6cfd2c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 28, 2016

Filed

May 16, 2016

To disclose

18 days

Affected

Not disclosed

Confidence

65%

Full breach record for Solano College →

On April 28, 2016, Solano Community College experienced a phishing incident where an employee responded to a spoofed email, inadvertently disclosing W-2 forms for employees who worked in 2015. The exposed data included names, addresses, Social Security numbers, and salary information. The college secured the account, reset passwords, notified law enforcement, and offered one year of identity protection services to affected employees.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 28, 2016 → Notified May 3, 20165d ✓ CA 60-day OK18 days discovery → filing

Incident timeline

discovery → filing · 18 days

Apr 28, 2016

Begins

Apr 28, 2016

Discovered

May 16, 2016

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Solano Community College District
norm: solano community college district
Domain: solano.edu

Name: Solano College
norm: solano college
Domain: solano.edu
Industry: Educationllm

Discovered: Apr 28, 2016
Breach occurred: Apr 28, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 3, 2016
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified the Solano County Sheriff’s Office
Initial access: phishing_link

During the incident: Secured the email account
Reset passwords
Notified the Solano County Sheriff’s Office
Engaged the Solano County Sheriff’s Office Computer Crime Task Force in the investigation
Offering a free, one-year membership in Experian’s ProtectMyID Alert
Changes made: Providing additional education and training regarding phishing emails to all employees
Conducting a comprehensive review of security practices, procedures and safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: CA 60-day OK · 5d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 28, 2016
→ Notified: May 3, 2016
5d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 28, 2016 → Notified: May 3, 2016	5d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-61842
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 16, 2016
Raw hash: 63ccdd09375dc8be43e3a08407b1642c151f6f13e789cbd87f4d3387225050a4

Reporting entitySolano Community College District

Victim entitySolano College

Incidentdiscovered Apr 28, 2016

Stated responseSecured the email account

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov