HackingEducationEducationStolen CredentialsCustomer Data InvolvedGovernment IDPIIMediumContained

AUBURN UNIVERSITY CREDIT UNION

bd_e7be0ff738b38543 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 23, 2017

Filed

Jul 3, 2017

To disclose

10 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for AUBURN UNIVERSITY CREDIT UNION →6 incidents on file

Auburn University notified Montana residents of a data security incident discovered on June 23, 2017, involving compromised credentials that may have exposed Social Security numbers. The university offered one year of Experian IdentityWorks services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 days

Jun 23, 2017

Discovered

Jul 3, 2017

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_f01c10cef04482142017-07-03Verified

Name: AUBURN UNIVERSITY CREDIT UNION
norm: auburn university credit union
Industry: education

Name: AUBURN UNIVERSITY CREDIT UNION
norm: auburn university credit union
Industry: education
Industry: Educationllm

Discovered: Jun 23, 2017
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Offering 12 months of complimentary credit monitoring through Experian IdentityWorks
Offering identity restoration support through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 3 · first

Montana State AGJul 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Auburn-University.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 3, 2017
Raw hash: a1b1f14b29bd221de07e377d4e87c7af375e0ec6823bbf61ee51976d415ed6fd

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAUBURN UNIVERSITY CREDIT UNION

Victim entityAUBURN UNIVERSITY CREDIT UNION

Incidentdiscovered Jun 23, 2017

Stated responseOffering 12 months of complimentary credit monitoring through Experian IdentityWorks

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov