HackingEducationEducationCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumResolved

The Research Foundation for The State University of New York

bd_5f75759e89d7c8d6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 13, 2021

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

77%

Full breach record for The Research Foundation for The State University of New York →3 incidents on file

The Research Foundation for the State University of New York experienced unauthorized network access between May 22 and July 9, 2021. An unauthorized party obtained files from file servers containing names and Social Security numbers. A cybersecurity firm was engaged, law enforcement was notified, and affected individuals were offered complimentary Experian IdentityWorks credit monitoring. Notification letters were sent August 13, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

May 22, 2021

Begins

Aug 13, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_75df636bcc243c002021-08-13Verified
Montana State AGbd_9962a7013e8651682021-08-13Verified
Maine State AGbd_de5c6df8faf879912021-08-13Verified
Indiana State AGbd_e211e77269ed7d472021-08-13Verified

Show 2 more filings ↓up to 91d gap

New Hampshire State AGbd_35345d340277dc152021-11-12 · +91dVerified
Maine State AGbd_ce26715c6b70a3c92021-11-12 · +91dVerified

Name: The Research Foundation for The State University of New York
norm: the research foundation for the state university of new york
Domain: rfsuny.org

Name: The Research Foundation for The State University of New York
norm: the research foundation for the state university of new york
Domain: rfsuny.org
Industry: Educationllm

Discovered: —
Breach occurred: May 22, 2021 – Jul 9, 2021
Materiality determined: —
Notification sent: Aug 13, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data StagedT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Immediately began an investigation
A cybersecurity firm was engaged
Measures were taken to address the incident and to restore the systems
Notified law enforcement and worked to support its investigation
Conducted a careful review of the files obtained and other files on the file servers
Arranged for affected individuals to receive a complimentary one-year membership to Experian's IdentityWorks credit monitoring service
Changes made: Taking steps to further enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Massachusetts State AGAug 13 · first

Montana State AGAug 13 · first

Maine State AGAug 13 · first

Indiana State AGAug 13 · first

California State AGAug 13 · first · this page

New Hampshire State AG+91d

Maine State AG+91d

Pattern: first filing Aug 13 (MA), last Nov 12 (ME) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-543880
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2021
Raw hash: be7b88272279ca20dbf16d376c5342350ebc0b8ac99c5aff3156cb259a351403

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityThe Research Foundation for The State University of New York

Victim entityThe Research Foundation for The State University of New York

IncidentUnauthorized Access

Stated responseImmediately began an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov