PhysicalEducationEducationTheftEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

University of Alabama

bd_b11a22d040f429af · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 21, 2021

To disclose

—

Affected

297scope not determined

Linked

2 filings

Confidence

64%

Full breach record for University of Alabama →5 incidents on file

University of Alabama reported the theft of a personal employee laptop on August 26, 2021. The device contained a document with PII for 297 employees and dependents, including SSNs and DOBs. The laptop was password-protected but encryption status was unconfirmed. The University offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 26, 2021

Begins

Sep 21, 2021

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_275f4aa19458acdb2021-09-24 · +3dVerified

Name: University of Alabama
norm: university of alabama

Name: University of Alabama
norm: university of alabama
Industry: Educationllm

Discovered: —
Breach occurred: Aug 26, 2021
Materiality determined: —
Notification sent: Sep 24, 2021
Affected individuals: 297scope not determined
Data types: Identity (basic)Government IDEmployment
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: UA officials immediately conducted a scan of the employee’s email account
The laptop was set to remotely erase all information if and when it is connected to the internet again
The University is offering you two years of free credit monitoring and identity theft detection services
Changes made: The University constantly reviews and updates the comprehensive plan we have in place to secure sensitive information
Reminding employees to not store sensitive information on personal computers or on unencrypted mobile devices
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGSep 21 · first · this page

Indiana State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/university-alabama-20210921.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 21, 2021
Raw hash: fffc6107651d4e65b57fe386aea1aafd0908a2621edcc5055ca757e26cc5fa22

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityUniversity of Alabama

Victim entityUniversity of Alabama

IncidentUnknown

Stated responseUA officials immediately conducted a scan of the employee’s email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov