CSIDB logo
Incident

Lewis and Clark Community College

Incident posture

Attack window
Nov 2021
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2026-09-26 10:40

Linked entities

Victim
Lewis and Clark Community College
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Nov 2021
Discovered
Nov 2021
Disclosed
Nov 2021
Resolved
Pending

Summary

Lewis and Clark Community College closed all its campuses and cancelled all extracurricular activities, including sports, after the director of information technology noticed suspicious activity and shut down the computer network. College president Ken Trzaska said hackers gained access to the network but never achieved control. The disruption took place ahead of a holiday period.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On Tuesday, November 23, 2021, the director of information technology at Lewis and Clark Community College observed suspicious activity on the institution’s computer network. The following day, Wednesday, November 24, the director ordered a shutdown of the network to prevent further intrusion. College officials confirmed that the shutdown was initiated after the anomalous behavior was detected. The action was taken as a precautionary measure while the scope of the incident was assessed.

As a result of the network shutdown, the college closed all of its campuses for the week and cancelled all extra‑curricular activities, including sports programs. President Ken Trzaska stated that although hackers had gained entry to the network, they never achieved control over systems. The campus closures affected students, faculty, and staff who were unable to attend in‑person classes or use college facilities during the period.

The attack took place in the days preceding Thanksgiving, a period when many staff members were potentially off or planning to take leave for the holiday weekend. The college’s response included the network shutdown and subsequent campus closures. No further details about the attack’s origin or duration were provided in the source.

Sources

Sources available to members: 1 source.

CSIDB