AccidentalMisconfigurationDelayed DiscoveryCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICMediumContained
Stanford University Equity Partnership, L.P.
bd_235151ef407059c4 · schema v1 · pii pii-v1
Full breach record for Stanford University Equity Partnership, L.P. →Stanford University Graduate School of Business (GSB) disclosed a data breach involving improperly configured permissions on a shared file server. From 2014 to December 2017, folders containing confidential traveler information (names, passport/visa numbers, SSNs, health insurance details) were accessible to GSB faculty, staff, and students. The breach was discovered by the University Privacy Office on October 27, 2017. No evidence of unauthorized access was found, but credit monitoring was offered to affected individuals.
California clockDiscovered Oct 27, 2017 → Notified Dec 20, 201754d ✓ CA 60-day OK8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-131599
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2017
- Raw hash
- 86437305d8350d6bfcdaf38f094d2b42a21a3de1da7be37817efeec93acf4518
Reporting entity
- Name
- Stanford University Equity Partnership, L.P.norm: stanford university equity partnership
Victim entity
- Name
- Stanford University Equity Partnership, L.P.norm: stanford university equity partnership
Incident
- Discovered
- Oct 27, 2017
- Materiality determined
- —
- Notification sent
- Dec 20, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 54d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 27, 2017→ Notified: Dec 20, 201754d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.