HackingEducationEducationStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

North Carolina State University

bd_e901e4b929327b3c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 3, 2016

Filed

Jul 8, 2016

To disclose

5 weeks

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for North Carolina State University →3 incidents on file

North Carolina State University notified individuals that an unauthorized person accessed a university email account on June 3, 2016. The access potentially exposed names, addresses, student IDs, and SSNs from a 2013 file. No evidence of misuse was found. The university removed the data, enforced credential changes and 2-Step Verification, and provided one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Jun 3, 2016

Discovered

Jul 8, 2016

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_f19f4c45c9171c902016-07-08Verified
New Hampshire State AGbd_f3b26edffd2035162016-07-08Verified

Name: North Carolina State University
norm: north carolina state university

Name: North Carolina State University
norm: north carolina state university
Industry: Educationllm

Discovered: Jun 3, 2016
Materiality determined: —
Notification sent: Jun 3, 2016
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: advised the North Carolina Attorney General’s Office
Initial access: valid_credentials

During the incident: Removing the file and email(s) containing personal identifying information from the compromised email account
Requiring affected university employees to change their account credentials and increase security protocols, including 2-Step Verification
Requiring additional and focused information security protocols to be implemented within the affected unit as well as more broadly throughout campus to all systems containing sensitive data
Providing affected individuals with credit monitoring services for one year
Advised the North Carolina Attorney General’s Office and the following three major consumer reporting agencies: Equifax, Experian, and TransUnion
Changes made: Requiring affected university employees to change their account credentials and increase security protocols, including 2-Step Verification
Requiring additional and focused information security protocols to be implemented within the affected unit as well as more broadly throughout campus to all systems containing sensitive data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 8 · first

New Hampshire State AGJul 8 · first

Montana State AGJul 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/North-Carolina-State-University.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2016
Raw hash: e0a0b5dbf4ebcd6c593ac2d883e3bca0fab7077bc3abaff4d7fa9c02fa9386fb

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNorth Carolina State University

Victim entityNorth Carolina State University

Incidentdiscovered Jun 3, 2016

Stated responseRemoving the file and email(s) containing personal identifying information from the compromised email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov