PhysicalEducationEducationLossCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

UNIVERSITY OF SOUTHERN CALIFORNIA

bd_a24a34dbd24aff6e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 1, 2021

Filed

Dec 2, 2021

To disclose

9 weeks

Affected

1state residents only

Linked

7 filings

Confidence

65%

Full breach record for UNIVERSITY OF SOUTHERN CALIFORNIA →3 incidents on file

University of Southern California notified Montana residents that a professor lost an external hard drive containing student names and SSNs. USC discovered the loss on Oct 1, 2021, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 9 weeks / 62 days

Sep 28, 2021

Begins

Oct 1, 2021

Discovered

Dec 2, 2021

Filed

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_cb71465ebb99feaf2021-12-02Verified
Massachusetts State AGbd_0ed3ac6308a371702021-12-22 · +20dVerified
California State AGbd_7b12e5e380e420fc2021-12-22 · +20dVerified
Maine State AGbd_4962b25312de3ec32021-12-28 · +26dVerified by operator

Show 2 more filings ↓up to 155d gap

California State AGbd_225c2aa965cadb542022-05-05 · +154dVerified
New Hampshire State AGbd_06e865c633561db82022-05-06 · +155dVerified

Name: UNIVERSITY OF SOUTHERN CALIFORNIA
norm: university of southern california

Name: UNIVERSITY OF SOUTHERN CALIFORNIA
norm: university of southern california
Industry: Educationllm

Discovered: Oct 1, 2021
Breach occurred: Sep 28, 2021
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 2, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Initiated an investigation and a review of available backups of the hard drive data
Reviewed its data security policies with the professor
Offering complimentary identity monitoring and identity theft restoration services through IDX
Changes made: Reviewed its data security policies with the professor in an effort to prevent a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Indiana State AGDec 2 · first

Montana State AGDec 2 · first · this page

Massachusetts State AG+20d

California State AG+20d

Maine State AG+26d

California State AG+154d

New Hampshire State AG+155d

Pattern: first filing Dec 2 (IN), last May 6 (NH) — a 155-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-128.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2021
Raw hash: c68e634cf2567335d2a5f23a6c19d4471e19086d898a5ba769e580603f18a8d5

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityUNIVERSITY OF SOUTHERN CALIFORNIA

Victim entityUNIVERSITY OF SOUTHERN CALIFORNIA

Incidentdiscovered Oct 1, 2021

Stated responseInitiated an investigation and a review of available backups of the hard drive data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov