Oak Ridge Associated Universities, Incorporated
bd_d835c740d4993730 · schema v1 · pii pii-v1
Full breach record for Oak Ridge Associated Universities, Incorporated →2 incidents on fileOak Ridge Associated Universities (ORAU) notified former DOE workers of a data breach involving MOVEit Transfer software. A criminal organization exploited a vulnerability in the software to exfiltrate personal information (names, addresses, etc.) between May 28-30, 2023. ORAU discovered the vulnerability on May 31, 2023, and notified law enforcement and the DOE. Affected individuals were offered credit monitoring and identity theft protection services.
J jump to incidentP pin to compareR raw source
Incident timeline
May 28, 2023
Begins
May 31, 2023
Discovered
Aug 21, 2023
Filed
vs. sector median
7 wks faster
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitecl0pbd_964719921d9afe4f2023-07-26 · +26dVerified by operator
Regulatory filings (9) · sorted by filing gap
- Oregon State AGbd_1be1194ec55748642023-08-21Verified
- California State AGbd_393e41f072f2bf092023-08-21Verified by operator
- Vermont State AGbd_47bcff9365e9eef72023-08-21Verified by operator
- Massachusetts State AGbd_6ce30d92e1f562672023-08-21Verified by operator
Show 5 more filings ↓Show fewer ↑up to 3d gap
- Montana State AGbd_886bd4fa64f2a2ba2023-08-21Verified
- Maine State AGbd_991a0ec14d6a0e3b2023-08-21Verified by operator
- Indiana State AGbd_decca8f8082609c72023-08-21Verified
- Washington State AGbd_fd982dc95fd180e52023-08-21Verified
- South Carolina State AGbd_9c88bb16eff983962023-08-24 · +3dVerified
Filing propagation · 10 filings · 10 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.