HackingEducationEducationStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountCredentialsIdentity (basic)LowResolved

Colgate University

bd_d2394d8364fbff67 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 27, 2019

Filed

Apr 11, 2019

To disclose

6 weeks

Affected

2state residents only

Linked

3 filings

Confidence

65%

Full breach record for Colgate University →2 incidents on file

Colgate University notified Montana AG of a data breach at third-party provider PrismRBS. Between Jan 19-26, 2019, an unauthorized party installed malware on PrismRBS servers hosting the university bookstore, capturing payment card info (names, numbers, CVVs) and potentially student IDs. Incident remediated; 1-year identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 39 days

discovery → filing · 6 weeks / 43 days

Jan 19, 2019

Begins

Feb 27, 2019

Discovered

Apr 11, 2019

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Part of PrismRBS supply-chain incident (2019) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_54f13adb7fdfbcbe2019-04-10 · +1dVerified
New Hampshire State AGbd_d583a77ce59bbf1c2019-04-10 · +1dVerified

Name: Colgate University
norm: colgate university
Domain: colgate.edu

Name: Colgate University
norm: colgate university
Domain: colgate.edu
Industry: Educationllm

Discovered: Feb 27, 2019
Breach occurred: Jan 19, 2019 – Jan 26, 2019
Undetected for: 39 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 11, 2019
Affected individuals: 2state-resident count only
Data types: Financial accountCredentialsIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input CaptureT1078 Valid Accounts
Threat actor: ExternalFinancial
Third party: via PrismRBS
Initial access: external_remote_services

During the incident: PrismRBS hired an expert outside PCI Forensics Investigator to respond to the incident
Malicious software has been removed and the incident has been fully remediated
PrismRBS has implemented several additional security measures to help prevent this type of incident from reoccurring in the future
Notified credit card payment processor of the incident
Offering one year of identity protection services through IdentityWorks
Changes made: Implemented additional security measures to help prevent this type of incident from reoccurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGApr 10 · first

New Hampshire State AGApr 10 · first

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-Colgate-Breach-Notification-Template-FINAL.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 11, 2019
Raw hash: 595c096f44a1eb9dee9554366819415caf9e149b8f88f1b10534910f157d7be3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityColgate University

Victim entityColgate University

Incidentdiscovered Feb 27, 2019

Stated responsePrismRBS hired an expert outside PCI Forensics Investigator to respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov