Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICHighContained
Tuskegee University
bd_72424c9d3b8c8e3d · schema v1 · pii pii-v1
Full breach record for Tuskegee University →Tuskegee University reported a phishing attack affecting 1,152 California residents. Unauthorized access occurred between September 24, 2017, and March 22, 2018, compromising faculty and staff email accounts containing names, SSNs, financial account info, medical info, and driver's license numbers. Tuskegee engaged forensic investigators, reset credentials, and provided one year of credit monitoring via Experian.
California clockDiscovered Mar 12, 2018 → Notified Jun 21, 2018101d ✗ CA 60-day late15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,152 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-137340
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 22, 2018
- Raw hash
- a2837684df96a82257bcefc4c917d22fb380cfcde52a40ec9aad20e20635a559
Reporting entity
- Name
- Tuskegee Universitynorm: tuskegee university
- Domain
- tuskegee.edu
Victim entity
- Name
- Tuskegee Universitynorm: tuskegee university
- Domain
- tuskegee.edu
Incident
- Discovered
- Mar 12, 2018
- Materiality determined
- —
- Notification sent
- Jun 21, 2018
- Affected individuals
- 1,152
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- CA 60-day late · 101d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 12, 2018→ Notified: Jun 21, 2018101d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.