AccidentalMisconfigurationDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
University of North Carolina at Charlotte
bd_32ae3feff3fdbff3 · schema v1 · pii pii-v1
Full breach record for University of North Carolina at Charlotte →University of North Carolina at Charlotte disclosed a cybersecurity incident on May 9, 2012, involving incorrect access settings that exposed personal data, including names, addresses, SSNs, and credit card info, from general systems and engineering college systems. The breach occurred over a period of approximately three months and over a decade, respectively. No inappropriate access was confirmed, but the University notified affected individuals and engaged law enforcement.
California clockDiscovered Feb 15, 2012 → Notified May 9, 201284d ✗ CA 60-day late12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-23160
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 11, 2012
- Raw hash
- 052f7a9b7ac556a6083a40328987edb04bbb173d1becf93bffeaebb132aebb41
Reporting entity
- Name
- University of North Carolina at Charlottenorm: university of north carolina at charlotte
- Domain
- uncc.edu
- Industry
- education
Victim entity
- Name
- University of North Carolina at Charlottenorm: university of north carolina at charlotte
- Domain
- uncc.edu
- Industry
- education
Incident
- Discovered
- Feb 15, 2012
- Materiality determined
- May 9, 2012
- Notification sent
- May 9, 2012
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Regulator citations
- involved state and federal regulatory and law enforcement agencies
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- CA 60-day late · 84d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 15, 2012→ Notified: May 9, 201284d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.