AccidentalEducationEducationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDHighContained

Global University

bd_567ec2dfd50c3d16 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 1, 2018

Filed

May 30, 2018

To disclose

17 weeks

Affected

1,333state residents only

Linked

7 filings

Confidence

65%

Full breach record for Global University →

Global University disclosed a data breach involving a misconfigured database accessible to the Internet from Dec 31, 2017 to Jan 31, 2018. The university learned of the potential exposure on Feb 1, 2018. Data included names, SSNs, and DOBs of current and former students. Notices were sent on May 8, 2018, offering 12 months of identity protection.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due17 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 32 days

discovery → filing · 17 weeks / 118 days

Dec 31, 2017

Begins

Feb 1, 2018

Discovered

May 30, 2018

Filed

vs. sector median

+8 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

South Carolina State AGbd_32a1fdea64af3d402018-05-15 · +15dVerified
California State AGbd_061b412aa28f416b2018-05-08 · +22dVerified
Massachusetts State AGbd_77ffa4f9d6798d232018-05-08 · +22dVerified
Washington State AGbd_9be0fff45ee6f7c32018-05-08 · +22dVerified

Show 2 more filings ↓up to 22d gap

Montana State AGbd_de7058957e71dff32018-05-08 · +22dVerified
Oregon State AGbd_eaa4fc075adca0972018-05-08 · +22dCandidate

Name: Global University
norm: global university
Domain: globaluniversity.edu

Name: Global University
norm: global university
Domain: globaluniversity.edu
Industry: Educationllm

Discovered: Feb 1, 2018
Breach occurred: Dec 31, 2017 – Jan 31, 2018
Undetected for: 32 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 8, 2018
Affected individuals: 1,333state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Regulator citations: notifying state regulators, as requiredreported this event to law enforcement

During the incident: Launched an investigation
Began working with third-party forensic investigators
Notifying state regulators
Arranged to have AllClear ID protect your identity for 12 months at no cost
Reported this event to law enforcement
Changes made: Reviewing its existing policies and procedures
Implement additional safeguards to further secure the information in its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(118 days from discovery to filing)
Compliance flags: HI CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGMay 8 · first

Massachusetts State AGMay 8 · first

Washington State AGMay 8 · first

Montana State AGMay 8 · first

Oregon State AGMay 8 · first

South Carolina State AG+7d

Hawaii State AG+22d · this page

Pattern: first filing May 8 (CA), last May 30 (HI) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://web.archive.org/web/20211024101019id_/https://cca.hawaii.gov/ocp/files/2018/11/Global-University_OCP_2018-0303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 30, 2018
Raw hash: 2a92e53f852c92129be74a9839049bcd4994758b630aa0c2a32aab4b8c0b0472

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityGlobal University

Victim entityGlobal University

Incidentdiscovered Feb 1, 2018

Stated responseLaunched an investigation

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenanceweb.archive.org