HackingEducationEducationCustomer Data InvolvedDelayed DiscoveryGovernment IDFinancial accountIdentity (basic)MediumContained

University of California, Berkeley

bd_6937cf56e8f239f8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 14, 2015

Filed

Apr 30, 2015

To disclose

7 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for University of California, Berkeley →2 incidents on file

University of California, Berkeley disclosed unauthorized access to a web server maintained by the Division of Equity & Inclusion. The breach, discovered on March 14, 2015, involved access occurring between December 2014 and February 2015. Affected data may include social security numbers, bank account numbers, and family financial information of students. The university removed the server, engaged forensic investigators, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 14, 2015 → Notified Apr 30, 201547d ✓ CA 60-day OK7 weeks discovery → filing

Incident timeline

undetected · 103 days

discovery → filing · 7 weeks / 47 days

Dec 1, 2014

Begins

Mar 14, 2015

Discovered

Apr 30, 2015

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: University of California, Berkeley
norm: university of california berkeley
Domain: berkeley.edu

Name: University of California, Berkeley
norm: university of california berkeley
Domain: berkeley.edu
Industry: Educationllm

Discovered: Mar 14, 2015
Breach occurred: Dec 1, 2014 – Feb 28, 2015
Undetected for: 103 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 30, 2015
Affected individuals: Not disclosed
Data types: Government IDFinancial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed breach notification with California Attorney General

During the incident: Immediately removed the server from the network
Retained a computer investigation firm to assist with the investigation
Providing a free year of credit monitoring and identity restoration services through ID Experts
Changes made: Measures have been taken to better safeguard personal information
Continue to expand and strengthen efforts to protect University systems and servers from unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: CA 60-day OK · 47d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 14, 2015
→ Notified: Apr 30, 2015
47d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 14, 2015 → Notified: Apr 30, 2015	47d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-55760
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 30, 2015
Raw hash: 54d0624cacb0e4aeb63c2bc5bd1f1658cec0b6759c80e76e3abb3d98061cf2e3

Reporting entityUniversity of California, Berkeley

Victim entityUniversity of California, Berkeley

Incidentdiscovered Mar 14, 2015

Stated responseImmediately removed the server from the network

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov