PhysicalEducationEducationLossCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHighContained

Seattle University

bd_36f8dcd17f5295b4 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 28, 2019

Filed

Apr 23, 2019

To disclose

26 days

Affected

2,064state residents only

Linked

2 filings

Confidence

71%

Full breach record for Seattle University →3 incidents on file

Seattle University reported the loss of an unencrypted university-issued laptop on March 26, 2019. The incident was discovered on March 28, 2019. The laptop contained names and Social Security numbers of current and former employees and their dependents, affecting 2,064 Washington residents. No evidence of unauthorized access was found. The university notified the WA Attorney General and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 26 days

Mar 26, 2019

Begins

Mar 28, 2019

Discovered

Apr 23, 2019

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_37fd012581fb9e9f2019-04-25 · +2dVerified

Name: Seattle University
norm: seattle university

Name: Seattle University
norm: seattle university
Industry: Educationllm

Discovered: Mar 28, 2019
Breach occurred: Mar 26, 2019
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 23, 2019
Affected individuals: 2,064state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security number
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle 1-99dexposure 0d
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified Attorney General Bob Ferguson

During the incident: Began an internal investigation
Contacted King County Metro and the Seattle Police Department
Providing notice via postal mail to each of the potentially affected individuals
Offering the potentially affected Washington residents a complimentary one-year membership in credit monitoring and identity theft protection services through Experian
Changes made: Taking steps to further enhance its data security procedures, including encrypting data on University-issued laptops
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Washington State AGApr 23 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2019
Raw hash: 2dc4189ffabf458b24194c97133085c981869e4ded40806dd0587c50b8902c65

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySeattle University

Victim entitySeattle University

Incidentdiscovered Mar 28, 2019

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com