IVC contacts potential victims of ransomware attack

IMPERIAL — Most individuals whose personal data may have been compromised in this summer’s ransomware attack on Imperial Valley College’s computer network have been notified of the breach, Imperial Community College District leaders announced Thursday.

ICCD said in a release it has worked diligently to obtain sufficient contact information to provide individual notification, however is unable to locate addresses for a number of individuals.

The release added there is no indication that any information potentially accessed was misused during this incident.

“ICCD has identified no evidence that any sensitive information was accessed, viewed or downloaded, however, such actions cannot be ruled out,” the release said. “Therefore, out of an abundance of caution and so that affected individuals may diligently monitor their accounts, ICCD is providing free credit monitoring to those individuals whose information was potentially accessed.”

ICCD said it became aware of the attack Aug. 6 and took immediate steps to secure and restore the system, including engaging a third-party forensic company to investigate the cause and scope of the incident.

Because the fall semester was scheduled to begin 11 days after the attack, the college decided it ultimately was in the best interests of students and employees to pay the $55,068 ransom that was demanded.

On Oct. 16, after thorough investigation, ICCD said it determined that the unauthorized access may have allowed access to individuals’ personal information. The information potentially exposed may have included names and addresses in some combination with either a social security number, tax identification number, financial account information, health information, and/ or a username and password.

ICCD said it recommends that individuals potentially impacted remain vigilant in regularly reviewing and monitoring all account statements and credit history to guard against any unauthorized transactions or activity.

“ICCD takes privacy very seriously and has established stringent protocols to ensure individuals’ information remain private,” the release said. “ICCD has taken every step necessary to address the incident, including implementing additional safeguards to ensure this type of incident will not be repeated.”

For additional information regarding this incident, or to determine if you were potentially impacted, contact (855) 914-4656, Monday through Friday, from 6 a.m. to 6 p.m. Pacific Time.