PhysicalEducationEducationTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

University of Nebraska Lincoln

bd_e787a4c856db652f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 10, 2019

To disclose

—

Affected

1state residents only

Confidence

65%

Full breach record for University of Nebraska Lincoln →

University of Nebraska notified Montana AG that a password-protected but unencrypted laptop containing employee PII (names, SSNs, addresses) was stolen on June 10, 2019. No unauthorized use was known. Remediation included password resets, encryption efforts, and offering 1 year of Experian identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 10, 2019

Begins

Jul 10, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: University of Nebraska Lincoln
norm: university of nebraska lincoln

Name: University of Nebraska Lincoln
norm: university of nebraska lincoln
Industry: Educationllm

Discovered: —
Breach occurred: Jun 10, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Monitoring the systems to which the employee had access for any unusual activity
Changed all passwords to accounts to which he had or has access
Reinforced the University’s information security policy with the employee
Contacted law enforcement to recover the laptop
Offering one year of identity protection services through Experian IdentityWorks
Changes made: Continuing the University’s process of removing sensitive data from that employee’s replacement laptop
Encrypting all other data stored on the laptop
Actively working to encrypt and remotely manage University owned laptops that have access to sensitive data
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-26.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2019
Raw hash: b151b168280d19e1e6a0be63995fd701231d0082a50c685bf0d04e024da9b172

Reporting entityUniversity of Nebraska Lincoln

Victim entityUniversity of Nebraska Lincoln

IncidentUnknown

Stated responseMonitoring the systems to which the employee had access for any unusual activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov