Social EngineeringPhishingEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTMediumContained
Solano College
bd_ec689289be6cfd2c · schema v1 · pii pii-v1
Full breach record for Solano College →On April 28, 2016, Solano Community College experienced a phishing incident where an employee responded to a spoofed email, inadvertently disclosing W-2 forms for employees who worked in 2015. The exposed data included names, addresses, Social Security numbers, and salary information. The college secured the account, reset passwords, notified law enforcement, and offered one year of identity protection services to affected employees.
California clockDiscovered Apr 28, 2016 → Notified May 3, 20165d ✓ CA 60-day OK18 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-61842
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2016
- Raw hash
- 63ccdd09375dc8be43e3a08407b1642c151f6f13e789cbd87f4d3387225050a4
Reporting entity
- Name
- Solano Community College Districtnorm: solano community college district
- Domain
- solano.edu
Victim entity
- Name
- Solano Collegenorm: solano college
- Domain
- solano.edu
Incident
- Discovered
- Apr 28, 2016
- Materiality determined
- —
- Notification sent
- May 3, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Notified the Solano County Sheriff’s Office
- Initial access
- phishing_link
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 5d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 28, 2016→ Notified: May 3, 20165d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.