AccidentalEducationEducationPublishing ErrorCustomer Data InvolvedGovernment IDIdentity (basic)MediumResolved

Worcester State University

bd_76a7128fd5e244fe · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 2, 2026

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Worcester State University →2 incidents on file

Worcester State University notified individuals that their personal information, including driver's license numbers, social security numbers, names, dates of birth, sex, height, and photos, was publicly posted on campus between January 24, 2026, and February 2, 2026. The university collected and destroyed the exposed materials and updated policies regarding information sharing between University Police and Residence Hall staff. The university is providing 24 months of credit monitoring and identity restoration services through Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 24, 2026

Begins

Mar 2, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Worcester State University
norm: worcester state university
Domain: worcester.edu

Name: Worcester State University
norm: worcester state university
Domain: worcester.edu
Industry: Educationllm

Discovered: —
Breach occurred: Jan 24, 2026 – Feb 2, 2026
Materiality determined: —
Notification sent: Feb 25, 2026
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unknown

During the incident: Collected all materials exposing these details from campus and destroyed them
Reviewed, evaluated and updated its policy and procedures surrounding communications between University Police and Residence Hall staff to ensure measures are taken to exclude any personal identifiable information when there is a need to share information regarding campus visitors
Changes made: Providing access to 24 months of credit monitoring and identity restoration services through Equifax at no charge
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-308-worcester-state-university/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 2, 2026
Raw hash: a22bf1bddaa3804188cc55e7b8d972db0e34f7ffbc829eb71df8eff8b46045b4

Reporting entityWorcester State University

Victim entityWorcester State University

IncidentUnknown

Stated responseCollected all materials exposing these details from campus and destroyed them

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov