AccidentalMisconfigurationData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Global University
bd_061b412aa28f416b · schema v1 · pii pii-v1
Full breach record for Global University →Global University reported a data event affecting 14,660 California residents. A database containing student names and Social Security Numbers was misconfigured and accessible to the Internet from Dec 31, 2017, to Jan 31, 2018. Global engaged forensic investigators, notified the FBI and state regulators, and offered one year of free credit monitoring and identity restoration services to affected individuals.
California clockDiscovered Feb 1, 2018 → Notified May 8, 201896d ✗ CA 60-day late14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9be0fff45ee6f7c3Washington State AGfiled 2018-05-08Verified
- bd_de7058957e71dff3Montana State AGfiled 2018-05-08Verified
- bd_eaa4fc075adca097Oregon State AGfiled 2018-05-08Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-135977
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 8, 2018
- Raw hash
- f3a9208eaa943b9533f9d9d565beac7b339b6e353de9098b1a0360ec0bae4c49
Reporting entity
- Name
- Global Universitynorm: global university
- Domain
- globaluniversity.edu
Victim entity
- Name
- Global Universitynorm: global university
- Domain
- globaluniversity.edu
Incident
- Discovered
- Feb 1, 2018
- Materiality determined
- —
- Notification sent
- May 8, 2018
- Affected individuals
- 14,660
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Regulator citations
- notifying state regulators, as requiredproviding written notice of this incident to the FBI, other state regulators, and major consumer reporting agencies
Compliance
- Time to disclose
- 14 weeks(96 days from discovery to filing)
- Compliance flags
- CA 60-day late · 96d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 1, 2018→ Notified: May 8, 201896d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.