HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
California State University East Bay
bd_97b5f2bf6d39667d · schema v1 · pii pii-v1
Full breach record for California State University East Bay →California State University East Bay disclosed a data breach affecting a web application used by the College of Education and Allied Studies. Unauthorized access occurred between March 27, 2017, and September 2, 2018, discovered on September 17, 2018. The attacker used an overseas IP address and a software tool to exfiltrate names, addresses, and Social Security numbers of applicants. The university offered 12 months of credit monitoring and mitigated vulnerabilities.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-140680
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 12, 2018
- Raw hash
- 87d23decfe9fdc3ac80e971095523919c4396de54b5339da5bac0102b77635f4
Reporting entity
- Name
- California State University East Baynorm: california state university east bay
- Industry
- education
Victim entity
- Name
- California State University East Baynorm: california state university east bay
- Industry
- education
Incident
- Discovered
- Sep 17, 2018
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.