HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
The New York Center for Research, Economic Advancement, Technology, Engineering and Science Corporation
bd_7f3959f8229075e8 · schema v1 · pii pii-v1
Full breach record for The New York Center for Research, Economic Advancement, Technology, Engineering and Science Corporation →The New York Center for Research, Economic Advancement, Technology, Engineering and Science Corporation (NY CREATES), SUNY Poly, and the Research Foundation reported unauthorized access to their network at the Fuller Road campus in Albany, NY, between Dec 13-14, 2022. An unauthorized party obtained files containing employee PII, including SSNs, driver's licenses, financial account numbers, and health information. Law enforcement was notified, a cybersecurity firm was engaged, and credit monitoring was offered to affected individuals.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3260d20827c756c6New Hampshire State AGfiled 2023-03-10Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-03-10-new-york-center-research-economic-advancement-technology-engineering-data-breach-notice
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 10, 2023
- Raw hash
- 7e6236824d98f25e36b9c806ecaedaeecd9c5e7c68b38a1d4e409a4c62d2633d
Reporting entity
- Name
- The New York Center for Research, Economic Advancement, Technology, Engineering and Science Corporationnorm: the new york center for research economic advancement technology engineering and science
Victim entity
- Name
- The New York Center for Research, Economic Advancement, Technology, Engineering and Science Corporationnorm: the new york center for research economic advancement technology engineering and science
Incident
- Discovered
- Dec 14, 2022
- Materiality determined
- —
- Notification sent
- Mar 10, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Law enforcement also was notified, and information is being provided to support its investigation
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.