MalwareEducationEducationRansomwareData EncryptedTargetedGovernment IDFinancial accountIdentity (basic)MediumContained

The University of Utah

bd_c94574c688891f21 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 19, 2020

Filed

Oct 23, 2020

To disclose

14 weeks

Affected

1state residents only

Confidence

66%

Full breach record for The University of Utah →9 incidents on file

The University of Utah notified the NH AG of a ransomware attack on CSBS servers. Intrusion began July 16, 2020; discovered July 19. Affected data included SSNs, credit card, and bank info. One NH resident notified on Oct 21, 2020. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 14 weeks / 96 days

Jul 16, 2020

Begins

Jul 19, 2020

Discovered

Oct 23, 2020

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: The University of Utah
norm: the university of utah
Domain: utah.edu

Name: The University of Utah
norm: the university of utah
Domain: utah.edu
Industry: Educationllm

Discovered: Jul 19, 2020
Breach occurred: Jul 16, 2020
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 21, 2020
Affected individuals: 1state-resident count only
Data types: Government IDFinancial accountIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Took steps to secure its network
Began restoring data from backups
Engaged an external firm that specializes in responding to ransomware attacks
Changes made: Made substantial investments in technology to monitor and protect the University community against attacks, including ransomware threats
Working to move all college systems with private and restricted data to central services
Unifying the campus to one central Active Directory
Moving college networks into the centrally managed University network
Implementing two-factor authentication
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(96 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/university-utah-20201023.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 23, 2020
Raw hash: 49d980d4186383f3526ebba2a0cd146157bc426a53e442446e30f9a3845dfcd5

Reporting entityThe University of Utah

Victim entityThe University of Utah

Incidentdiscovered Jul 19, 2020

Stated responseTook steps to secure its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov