HackingEducationEducationCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
The Research Foundation for The State University of New York
bd_5f75759e89d7c8d6 · schema v1 · pii pii-v1
Full breach record for The Research Foundation for The State University of New York →The Research Foundation for the State University of New York experienced unauthorized network access between May 22 and July 9, 2021. An unauthorized party obtained files from file servers containing names and Social Security numbers. A cybersecurity firm was engaged, law enforcement was notified, and affected individuals were offered complimentary Experian IdentityWorks credit monitoring. Notification letters were sent August 13, 2021.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9962a7013e865168Montana State AGfiled 2021-08-13Verified
- bd_de5c6df8faf87991Maine State AGfiled 2021-08-13Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-543880
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 13, 2021
- Raw hash
- be7b88272279ca20dbf16d376c5342350ebc0b8ac99c5aff3156cb259a351403
Reporting entity
- Name
- The Research Foundation for The State University of New Yorknorm: the research foundation for the state university of new york
Victim entity
- Name
- The Research Foundation for The State University of New Yorknorm: the research foundation for the state university of new york
- Industry
- Educationllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Aug 13, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1074 Data StagedT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.