MalwareEducationEducationDelayed DiscoveryMulti-Stage ChainIdentity (basic)Government IDEmploymentEducationPIIMediumActive

University of Connecticut

bd_863d0118c3316191 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 9, 2015

Filed

Jun 14, 2016

To disclose

15 months

Affected

19state residents only

Linked

4 filings

Confidence

63%

Full breach record for University of Connecticut →3 incidents on file

University of Connecticut School of Engineering detected malware on servers in March 2015, with penetration dating back to September 2013. Files contained PII including SSNs, names, and employment data. No evidence of access/disclosure found, but insufficient to rule it out. Notification sent May 31, 2016, offering 12 months identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 554 days

discovery → filing · 15 months / 463 days

Sep 1, 2013

Begins

Mar 9, 2015

Discovered

Jun 14, 2016

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_73f9d306ec848b0e2016-06-14Candidate
New Hampshire State AGbd_9ebd377ce6403ef72016-06-14Verified
Massachusetts State AGbd_13d31386cf953e132016-06-20 · +6dVerified

Name: UNIVERSITY OF CONNECTICUT FOUNDATION, INCORPORATED, THE
norm: university of connecticut foundation incorporated the
Domain: uconn.edu

Name: University of Connecticut
norm: university of connecticut
Domain: uconn.edu
Industry: Educationllm

Discovered: Mar 9, 2015
Breach occurred: Sep 1, 2013
Undetected for: 554 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 31, 2016
Affected individuals: 19state-resident count only
Data types: Identity (basic)Government IDEmploymentEducationPII
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External

During the incident: Arranged to have AllClear ID protect your identity for twelve (12) months at no cost to you
Providing notification to potentially impacted individuals and entities
Taking steps to prevent a similar occurrence
Changes made: Taking steps to prevent a similar occurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(463 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGJun 14 · first

New Hampshire State AGJun 14 · first

Montana State AGJun 14 · first · this page

Massachusetts State AG+6d

Pattern: first filing Jun 14 (CA), last Jun 20 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Universtiy-of-Connecticut.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2016
Raw hash: 291a43cdbf15a8b5f7b2cf7978a4f93d59736de696dbbbde185b40c33653eae2

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityUNIVERSITY OF CONNECTICUT FOUNDATION, INCORPORATED, THE

Victim entityUniversity of Connecticut

Incidentdiscovered Mar 9, 2015

Stated responseArranged to have AllClear ID protect your identity for twelve (12) months at no cost to you

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov