HackingEducationEducationEmployee Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)Financial accountEmploymentMediumContained

University of California, Santa Cruz

bd_e4e2c0de9db568cd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 7, 2014

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for University of California, Santa Cruz →4 incidents on file

University of California Santa Barbara notified employees of unauthorized access to archival payroll data containing names, SSNs, and direct deposit banking information. The breach occurred on November 1, 2013, but was discovered in April 2013 when employees reported check fraud. The university provided credit monitoring and strengthened archival data processes.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 1, 2013

Begins

Aug 7, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: University of California, Santa Cruz
norm: university of california santa cruz
Domain: goslugs.com

Name: University of California, Santa Cruz
norm: university of california santa cruz
Domain: goslugs.com
Industry: Educationllm

Discovered: —
Breach occurred: Nov 1, 2013
Materiality determined: —
Notification sent: Jul 1, 2014
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial accountEmployment
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Filed breach notification with California Attorney General

During the incident: Contracted with ID Experts to provide free credit monitoring service and insurance for identity theft restoration
Sent notification letters to affected employees
Conducted review of processes for management and storage of archived personal information
Strengthened processes for the management and storage of archived personal information
Examining systems to identify personal data that may legally be omitted from future archival records
Changes made: Review and strengthening of processes for the management and storage of archived personal information
Examining systems to identify personal data that may legally be omitted from future archival records
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-46145
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 7, 2014
Raw hash: 568c437822ea389c3782c53e9cbd3a9429bbc2716be1d039d21fd69382c36e99

Reporting entityUniversity of California, Santa Cruz

Victim entityUniversity of California, Santa Cruz

IncidentUnknown

Stated responseContracted with ID Experts to provide free credit monitoring service and insurance for identity theft restoration

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov