HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
UCLA Summer Sessions
bd_d6b4accc2f11b118 · schema v1 · pii pii-v1
Full breach record for UCLA Summer Sessions →UCLA Summer Sessions & International Education Office reported a cyberattack where an attacker gained unauthorized access to a server containing student personal information, including names, addresses, dates of birth, social security numbers, health insurance subscriber IDs, and some medical information. Forensic analysis did not show that the attacker actually accessed or acquired any personal information, but the possibility could not be ruled out. The organization offered 12 months of identity protection services via AllClear ID.
California clockDiscovered May 18, 2017 → Notified May 18, 20170d ✓ CA 60-day OK11 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-100724
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 31, 2017
- Raw hash
- 44ad92074a8a5182c800c40ce8adc073eeb1e7f8f252d1512feaa9529a0b18ba
Reporting entity
- Name
- UCLA Summer Sessionsnorm: ucla summer sessions
- Domain
- summer.ucla.edu
Victim entity
- Name
- UCLA Summer Sessionsnorm: ucla summer sessions
- Domain
- summer.ucla.edu
Incident
- Discovered
- May 18, 2017
- Materiality determined
- —
- Notification sent
- May 18, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 18, 2017→ Notified: May 18, 20170d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.