HackingEducationEducationHacking OtherCustomer Data InvolvedIdentity (basic)Government IDHighResolved

The University of South Carolina Upstate Foundations

bd_d601caf53bd57c12 · schema v1 · pii pii-v1

Severity

High

Discovered

May 31, 2020

Filed

Sep 14, 2020

To disclose

15 weeks

Affected · nationwide

6,5331 in this filing

Linked

3 filings

Confidence

50%

Full breach record for The University of South Carolina Upstate Foundations →2 incidents on file

The University of South Carolina Upstate Foundations reported a data breach to the Maine Attorney General, indicating that an external system hacking incident occurred in May 2020. The breach was also discovered in May 2020. One Maine resident was affected, and a total of 6,533 individuals were impacted. The compromised information includes names or other personal identifiers in combination with Social Security Numbers. Affected individuals were notified on September 11, 2020, and offered one year of identity theft protection services with Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 31, 2020 → Filed with AG Sep 14, 2020105d ✗ ME AG >90d15 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 31 days

discovery → filing · 15 weeks / 105 days

May 1, 2020

Begins

May 31, 2020

Discovered

Sep 14, 2020

Filed

vs. sector median

+8 wks slower

This filing is one of 3 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_be237c0c42542cb72020-09-14Verified
South Carolina State AGbd_d9ceef35f250f49c2020-09-14Verified

Name: The University of South Carolina Upstate Foundations
norm: the university of south carolina upstate foundations

Name: The University of South Carolina Upstate Foundations
norm: the university of south carolina upstate foundations
Industry: Educationllm

Discovered: May 31, 2020
Breach occurred: May 1, 2020 – May 31, 2020
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 11, 2020
Affected individuals: 6,533state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 1 year of identity theft protection services with Experian, including credit monitoring and a $1M insurance policy.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(105 days from discovery to filing)
Compliance flags: ME AG >90d · 105dME resident >60d · 102d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 31, 2020
→ Filed with AG: Sep 14, 2020
105d 90 days ME AG >90d
Maine
Discovered: May 31, 2020
→ Notified: Sep 11, 2020
102d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 31, 2020 → Filed with AG: Sep 14, 2020	105d	90 days	ME AG >90d
Maine	Discovered: May 31, 2020 → Notified: Sep 11, 2020	102d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGSep 14 · first

South Carolina State AGSep 14 · first

Maine State AGSep 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/47215804-1a22-4400-a66f-9b8a825c9b5d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 14, 2020
Raw hash: 1226396c047d3bfe9b538661339a5f0e651b91b7a560d1e829f50e0ccee52e17

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe University of South Carolina Upstate Foundations

Victim entityThe University of South Carolina Upstate Foundations

Incidentdiscovered May 31, 2020

Stated responseOffered 1 year of identity theft protection services with Experian, including credit monitoring and a $1M insurance policy.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov