HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedCREDENTIALSIDENTITY_BASICEDUCATIONLowContained
University of California, Washington Center (UCDC)
bd_4f7ad75eae67f492 · schema v1 · pii pii-v1
Full breach record for University of California, Washington Center (UCDC) →University of California, Washington Center (UCDC) notified alumni on June 20, 2014, that an unauthorized individual accessed its pre-enrollment system hosted by third-party vendor GoSignMeUp. The breach, discovered on June 8, 2014, involved the compromise of usernames, passwords, addresses, email addresses, gender, birth dates, and course enrollment data. UCDC deactivated affected accounts and is working with the vendor to enhance security. No SSNs or financial account information were stored in the system.
California clockDiscovered Jun 8, 2014 → Notified Jun 20, 201412d ✓ CA 60-day OK12 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-45553
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 20, 2014
- Raw hash
- d90915a3b10aff572c0a734b7b000f09e626721d41eb5e4708b2fe5fe63c0721
Reporting entity
- Name
- University of California, Washington Center (UCDC)norm: university of california washington center ucdc
- Domain
- ucdc.edu
Victim entity
- Name
- University of California, Washington Center (UCDC)norm: university of california washington center ucdc
- Domain
- ucdc.edu
Incident
- Discovered
- Jun 8, 2014
- Materiality determined
- —
- Notification sent
- Jun 20, 2014
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALSIDENTITY_BASICEDUCATION
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Third party
- via GoSignMeUp
- Initial access
- supply_chain
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 12d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 8, 2014→ Notified: Jun 20, 201412d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.