MalwareRansomwareData EncryptedData ExfiltratedRansom DemandedRansom PaidCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNTPHIMediumContained
UNIVERSITY OF CALIFORNIA, BERKELEY FOUNDATION
bd_7353599986c4452b · schema v1 · pii pii-v1
Full breach record for UNIVERSITY OF CALIFORNIA, BERKELEY FOUNDATION →On June 1, 2020, University of California San Francisco (UCSF) detected a ransomware attack on a limited part of its School of Medicine IT environment. The attacker obtained certain files and encrypted others. UCSF contained the incident, paid the ransom to decrypt data, and notified law enforcement. Affected data may include names, SSNs, health information, and financial data. UCSF offered 12 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-196123
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2020
- Raw hash
- b856e6c42f355e08603ff728de6f92d4c9440f5d51f42dca1c4297d4da7a457c
Reporting entity
- Name
- UNIVERSITY OF CALIFORNIA, BERKELEY FOUNDATIONnorm: university of california berkeley
Victim entity
- Name
- UNIVERSITY OF CALIFORNIA, BERKELEY FOUNDATIONnorm: university of california berkeley
Incident
- Discovered
- Jun 1, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNTPHI
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 24 weeks(165 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.