MalwareIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTEDUCATIONMediumActive
UNIVERSITY OF CONNECTICUT FOUNDATION, INCORPORATED, THE
bd_73f9d306ec848b0e · schema v1 · pii pii-v1
Full breach record for UNIVERSITY OF CONNECTICUT FOUNDATION, INCORPORATED, THE →University of Connecticut notified California AG that malware compromised School of Engineering servers starting Sept 2013, detected March 2015. Files contained SSNs, names, contact info, employment, and student data. No confirmed access/disclosure, but notification sent to potentially affected individuals offering 12 months identity protection via AllClear ID.
California clockDiscovered Mar 9, 2015 → Notified May 31, 2016449d ✗ CA 60-day late15 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-62350
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 14, 2016
- Raw hash
- de532b6ca073da15cecc3a40aa630b7c4d472698424385034fef4fc7d52cb171
Reporting entity
- Name
- UNIVERSITY OF CONNECTICUT FOUNDATION, INCORPORATED, THEnorm: university of connecticut foundation incorporated the
- Domain
- uconn.edu
- Industry
- Education
Victim entity
- Name
- UNIVERSITY OF CONNECTICUT FOUNDATION, INCORPORATED, THEnorm: university of connecticut foundation incorporated the
- Domain
- uconn.edu
- Industry
- Education
Incident
- Discovered
- Mar 9, 2015
- Materiality determined
- —
- Notification sent
- May 31, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTEDUCATION
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Submitted breach notification to California Office of the Attorney General
Compliance
- Time to disclose
- 15 months(463 days from discovery to filing)
- Compliance flags
- CA 60-day late · 449d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 9, 2015→ Notified: May 31, 2016449d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.