AccidentalEducationEducationMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

University of Wisconsin-Superior Alumni Association

bd_72a3f92c6082d123 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 5, 2018

Filed

Feb 26, 2018

To disclose

21 days

Affected

11state residents only

Linked

3 filings

Confidence

64%

Full breach record for University of Wisconsin-Superior Alumni Association →

The University of Wisconsin-Superior Alumni Association notified affected individuals that a student ID number (Social Security Number) was inadvertently printed on a Mississippi River Cruise brochure sent on February 1, 2018. The error was discovered on February 5, 2018. The breach involved names, addresses, and SSNs. The organization cleaned its database, ensured the vendor deleted mailing data, and provided one year of LifeLock identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 21 days

Feb 1, 2018

Begins

Feb 5, 2018

Discovered

Feb 26, 2018

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_f7b9a6111e037f772018-02-26Verified
New Hampshire State AGbd_f9a183dfb245b1702018-02-22 · +4dCandidate

Name: University of Wisconsin-Superior Alumni Association
norm: university of wisconsin superior alumni

Name: University of Wisconsin-Superior Alumni Association
norm: university of wisconsin superior alumni
Industry: Educationllm

Discovered: Feb 5, 2018
Breach occurred: Feb 1, 2018
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 1, 2018
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Cleaning the alumni and friend database and replacing all of the “old” ID numbers
Travel vendor verified the deletion of all mailing data used for this brochure
Retained LifeLock to provide you one (1) year of complimentary identify theft protection and credit monitoring services
Changes made: Cleaning the alumni and friend database and replacing all of the “old” ID numbers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGFeb 22 · first

Massachusetts State AG+4d

South Carolina State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2018/UWSuperiorAlumniAssociation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 26, 2018
Raw hash: 0829abeb42ab6012e9fd0896b6d9531e81e49bd2fb7917894050024bd09c945e

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityUniversity of Wisconsin-Superior Alumni Association

Victim entityUniversity of Wisconsin-Superior Alumni Association

Incidentdiscovered Feb 5, 2018

Stated responseCleaning the alumni and friend database and replacing all of the “old” ID numbers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov