Social EngineeringEducationEducationPhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

FRANCISCAN UNIVERSITY OF STEUBENVILLE

bd_2c6d631e5c9df1f7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 1, 2018

Filed

Nov 30, 2018

To disclose

9 weeks

Affected

3state residents only

Linked

3 filings

Confidence

64%

Full breach record for FRANCISCAN UNIVERSITY OF STEUBENVILLE →

Franciscan University of Steubenville notified affected individuals in November 2018 that an unauthorized third party compromised a limited number of business email accounts in October 2018. The incident involved phishing leading to credential compromise. No evidence of data misuse was found, but the university offered 24 months of identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 60 days

Oct 1, 2018

Begins

Oct 1, 2018

Discovered

Nov 30, 2018

Filed

vs. sector median

on median

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_1b956b943a6e61c72018-11-29 · +1dVerified
New Hampshire State AGbd_dd9d680b53e71d982018-12-03 · +3dVerified

Name: FRANCISCAN UNIVERSITY OF STEUBENVILLE
norm: franciscan university of steubenville
Domain: franciscan.edu

Name: FRANCISCAN UNIVERSITY OF STEUBENVILLE
norm: franciscan university of steubenville
Domain: franciscan.edu
Industry: Educationllm

Discovered: Oct 1, 2018
Breach occurred: Oct 1, 2018 – Oct 31, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 30, 2018
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: contacted law enforcement
Initial access: phishing_link

During the incident: Blocked further unauthorized access to University email accounts
Contacted law enforcement
Required employees to change their passwords
Engaged outside experts
Changes made: Make security enhancements to help prevent similar incidents from occurring in the future
Ongoing security analysis and testing of our network
Added levels of security will be configured within our software applications
Thorough review of our ITS security policies and procedures
Delivery of training programs for all of our faculty and staff to increase awareness
Offering 24 months of identity monitoring services at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 29 · first

Montana State AG+1d · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Franciscan-University-of-Steubenville.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2018
Raw hash: 448dd9b5e0d980f01d2b91a1b7b915bc8af5c16ee492476ee19fd1dbf56ec201

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFRANCISCAN UNIVERSITY OF STEUBENVILLE

Victim entityFRANCISCAN UNIVERSITY OF STEUBENVILLE

Incidentdiscovered Oct 1, 2018

Stated responseBlocked further unauthorized access to University email accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov