AccidentalEducationEducationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDHighContained

Global University

bd_32a1fdea64af3d40 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 1, 2018

Filed

May 15, 2018

To disclose

15 weeks

Affected

1,162state residents only

Linked

7 filings

Confidence

65%

Full breach record for Global University →

Global University disclosed a data breach where a misconfigured database containing student names, SSNs, and DOBs was accessible via the internet from Dec 31, 2017 to Jan 31, 2018. The incident was discovered on Feb 1, 2018. Notices were sent on May 8, 2018, offering 12 months of identity protection. No specific total count was provided, though 394 Rhode Island residents were noted.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due15 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 32 days

discovery → filing · 15 weeks / 103 days

Dec 31, 2017

Begins

Feb 1, 2018

Discovered

May 15, 2018

Filed

vs. sector median

+6 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_061b412aa28f416b2018-05-08 · +7dVerified
Massachusetts State AGbd_77ffa4f9d6798d232018-05-08 · +7dVerified
Washington State AGbd_9be0fff45ee6f7c32018-05-08 · +7dVerified
Montana State AGbd_de7058957e71dff32018-05-08 · +7dVerified

Show 2 more filings ↓up to 15d gap

Oregon State AGbd_eaa4fc075adca0972018-05-08 · +7dCandidate
Hawaii State AGbd_567ec2dfd50c3d162018-05-30 · +15dVerified

Name: Global University
norm: global university
Domain: globaluniversity.edu

Name: Global University
norm: global university
Domain: globaluniversity.edu
Industry: Educationllm

Discovered: Feb 1, 2018
Breach occurred: Dec 31, 2017 – Jan 31, 2018
Undetected for: 32 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 8, 2018
Affected individuals: 1,162state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Regulator citations: notifying state regulatorsreported this event to law enforcement

During the incident: Launched an investigation
Began working with third-party forensic investigators
Notifying state regulators
Arranged to have AllClear ID protect your identity for 12 months at no cost to you
Reported this event to law enforcement
Changes made: Reviewing its existing policies and procedures
Implement additional safeguards to further secure the information in its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(103 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGMay 8 · first

Massachusetts State AGMay 8 · first

Washington State AGMay 8 · first

Montana State AGMay 8 · first

Oregon State AGMay 8 · first

South Carolina State AG+7d · this page

Hawaii State AG+22d

Pattern: first filing May 8 (CA), last May 30 (HI) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2018/GlobalUniversity.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 15, 2018
Raw hash: d54610cdd078b1a68f5efa97855e5b09308cc7704659e1b78b10a5ac6ca76607

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityGlobal University

Victim entityGlobal University

Incidentdiscovered Feb 1, 2018

Stated responseLaunched an investigation

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov