HackingEducationEducationStolen CredentialsTargetedIdentity (basic)CredentialsLowContained

Occidental College

bd_fcf15e4f037020cb · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 19, 2017

To disclose

—

Affected

4state residents only

Linked

4 filings

Confidence

67%

Full breach record for Occidental College →

Occidental College notified the NH AG of a data breach affecting 4 NH residents. Unauthorized access occurred around June 1, 2017, to a file containing student/employee names, Oxy ID numbers, and encoded data for on-campus debit cards. No SSNs or financial data were exposed. Notifications sent June 19, 2017.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 1, 2017

Begins

Jun 19, 2017

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_3d299864c4150f2c2017-06-19Candidate
California State AGbd_6399d789a8b8824d2017-06-19Verified
Massachusetts State AGbd_d5efd42234666be72017-06-19Verified

Name: Occidental College
norm: occidental college
Domain: oxy.edu
Industry: Education

Name: Occidental College
norm: occidental college
Domain: oxy.edu
Industry: Education
Industry: Educationllm

Discovered: —
Breach occurred: Jun 1, 2017
Materiality determined: —
Notification sent: Jun 19, 2017
Affected individuals: 4state-resident count only
Data types: Identity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General pursuant to N.H. Rev. Stat.§ 359-C:20(1)(b)
Initial access: valid_credentials

During the incident: Conducted an internal investigation upon discovery of the breach
Increasing account activity monitoring to detect potential fraud involving Occidental College ID cards
Notifying employees and students whose personal information may have been exposed
Changes made: Reprogram the user's Occidental College ID card if fraud is discovered
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJun 19 · first

California State AGJun 19 · first

Massachusetts State AGJun 19 · first

New Hampshire State AGJun 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/occidental-college-20170619.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 19, 2017
Raw hash: 0969241459139438b6f1e1eca2c838d8b79022ed8a0aa2402553694ca805ee05

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityOccidental College

Victim entityOccidental College

IncidentUnauthorized Access

Stated responseConducted an internal investigation upon discovery of the breach

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov