HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Southern California University of Health Sciences
bd_8fb33406b14e9099 · schema v1 · pii pii-v1
Full breach record for Southern California University of Health Sciences →Southern California University of Health Sciences (SCUHS) notified individuals of unauthorized access to its network between March 23-24, 2026. An unauthorized actor viewed and copied files containing names and other personal information. SCUHS engaged cybersecurity specialists, secured the network, and is offering 12 months of credit monitoring via Kroll.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_a44cfd69c101fa78Maine State AGfiled 2026-05-19Verified by operator
- bd_6274102dfa5ded98Indiana State AGfiled 2026-05-18(1d gap)Verified by operator
- bd_b90a4f569589d9e0New Hampshire State AGfiled 2026-05-18(1d gap)Verified
- bd_c6e1f66e835a5eaaMassachusetts State AGfiled 2026-05-01(18d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-623665
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2026
- Raw hash
- 5e6f7fe6e5cf459c98a27bc2fa61865691334c7e63c005d316f905ed487ae633
Reporting entity
- Name
- Southern California University of Health Sciencesnorm: southern california university of health sciences
- Domain
- scuhs.edu
Victim entity
- Name
- Southern California University of Health Sciencesnorm: southern california university of health sciences
- Domain
- scuhs.edu
Incident
- Discovered
- Mar 24, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Report this event to regulators where required
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.