HackingEducationEducationStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountLowContained

UNIVERSITY OF SOUTHERN CALIFORNIA

bd_590228cbe2c345d8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 21, 2012

Filed

Jun 29, 2012

To disclose

8 days

Affected

Not disclosed

Confidence

65%

Full breach record for UNIVERSITY OF SOUTHERN CALIFORNIA →3 incidents on file

University of Southern California disclosed a breach affecting credit card purchases at dining facilities on its University Park and Health Sciences campuses. Credit card numbers were obtained illegally through a breach in a third-party software system used to process transactions between May 21 and June 21, 2012. No personally identifiable information was compromised. USC disabled the system, engaged Ernst & Young for forensic investigation, and notified affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 21, 2012 → Notified Jun 28, 20127d ✓ CA 60-day OK8 days discovery → filing

Incident timeline

undetected · 31 days

discovery → filing · 8 days

May 21, 2012

Begins

Jun 21, 2012

Discovered

Jun 29, 2012

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: UNIVERSITY OF SOUTHERN CALIFORNIA
norm: university of southern california

Name: UNIVERSITY OF SOUTHERN CALIFORNIA
norm: university of southern california
Industry: Educationllm

Discovered: Jun 21, 2012
Breach occurred: May 21, 2012 – Jun 21, 2012
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 28, 2012
Affected individuals: Not disclosed
Data types: Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified the California Attorney General
Third party: via Third-party software vendor
Initial access: supply_chain

During the incident: Disabled the compromised system
Notified the vendor of the security breach
Requested that the vendor take appropriate corrective actions to secure its system
Engaged Ernst & Young to conduct a forensic investigation
Notified faculty, students, and staff directly
Posted the notification on the USC web site
Distributed the link through the media and social media channels
USC's Department of Public Safety and the Los Angeles Police Department are investigating the incident
Changes made: Requested that the vendor take appropriate corrective actions to secure its system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: CA 60-day OK · 7d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 21, 2012
→ Notified: Jun 28, 2012
7d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 21, 2012 → Notified: Jun 28, 2012	7d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-32132
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2012
Raw hash: bdbbe4cecba80f226f441cd0b2a1af8c354bed6c4acb4868569529f1c615dde7

Reporting entityUNIVERSITY OF SOUTHERN CALIFORNIA

Victim entityUNIVERSITY OF SOUTHERN CALIFORNIA

Incidentdiscovered Jun 21, 2012

Stated responseDisabled the compromised system

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov