University of the People
bd_7684067d9ceb71f9 · schema v1 · pii pii-v1
Full breach record for University of the People →3 incidents on fileUniversity of the People notified Montana residents of a data security incident in mid-January 2022. Unauthorized third parties accessed or exfiltrated files from a SharePoint platform between Jan 2-10, 2022. The incident potentially exposed personal information of applicants and students. UoPeople engaged third-party experts, enhanced security, and offered one year of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 2, 2022
Begins
Jan 15, 2022
Discovered
Apr 4, 2023
Filed
vs. sector median
+56 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Vermont State AGbd_57d53b879077ad262023-04-04Verified
- New Hampshire State AGbd_970e1ff5835dd3562023-04-04Verified
- California State AGbd_1d855dd1d17c87fb2023-04-05 · +1dVerified
- Maine State AGbd_ac9b991feced758e2023-04-05 · +1dVerified
Show 1 more filing ↓Show fewer ↑up to 11d gap
- Indiana State AGbd_101bfc1e85fb714d2023-03-24 · +11dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Mar 24 (IN), last Apr 5 (ME) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.