Hartnell Community College District

Summary

Hartnell College experienced a network outage following the detection of suspicious activity, including unusually high network traffic during non-operational hours, prompting precautionary server shutdowns. The incident disrupted phone systems and required modified lab operations, though online teaching platforms remained functional. The institution collaborated with the FBI to investigate potential cyberattack origins while gradually restoring services. This marked the college's first such cybersecurity event, occurring amid increased digital threats to California educational institutions transitioning to technology-dependent operations.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Hartnell College, a public community college in California, detected suspicious network activity at approximately 6:00 AM on Sunday, October 2, 2022. The institution's security systems identified unusually high network traffic levels inconsistent with typical Sunday morning patterns, prompting immediate scrutiny. By 8:00 AM the same day, administrators implemented precautionary server shutdowns to contain potential threats. Technology Vice President Chelsy Pham emphasized the anomaly of such network activity during non-operational hours, noting the system's automated alert triggered their response. While the online learning platform Canvas remained operational throughout the incident, preventing class disruptions, certain laboratory and classroom activities required modification due to network unavailability. The college's phone systems remained offline during the outage period, though email and text notification systems continued functioning.

The institution initiated a phased network restoration process while collaborating with the Federal Bureau of Investigation to determine whether the incident constituted a cyber attack. President Michael Gutierrez confirmed the cautious approach to system recovery, acknowledging the community's adaptability during the disruption. This marked Hartnell's first significant cybersecurity incident according to both Pham and Gutierrez. The outage occurred amidst a series of cybersecurity events affecting California educational institutions, including recent attacks on Los Angeles Unified School District, College of the Desert, and Sierra College. Restoration efforts prioritized operational security, with no evidence suggesting academic data compromise or ransomware deployment. Administrative communications highlighted maintaining educational continuity through alternative platforms while critical systems underwent evaluation and gradual reactivation.

Sources

Sources available to members: 2 sources.