Carnegie Mellon University
bd_4b400de4cd0922bf · schema v1 · pii pii-v1
Full breach record for Carnegie Mellon University →Carnegie Mellon University detected suspicious activity on August 25, 2023, revealing unauthorized third-party access to a computer system. The attacker may have copied files containing names, social security numbers, and dates of birth. CMU disabled access to the files and collaborated with law enforcement. Affected individuals are offered 24 months of Experian IdentityWorks credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 24, 2023
Begins
Aug 25, 2023
Discovered
Jan 12, 2024
Filed
vs. sector median
+10 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_9d2179772cf585962024-01-12Verified
- Indiana State AGbd_a73a836d2c2f9a932024-01-12Verified
- Vermont State AGbd_d7e9b0ee37521eac2024-01-12Verified
- Maine State AGbd_e5516b04777ac61c2024-01-12Candidate
Show 1 more filing ↓Show fewer ↑
- Montana State AGbd_fa71a693bd4077562024-01-12Candidate
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.