Colorado State University - Pueblo
bd_f5d8040d4a3cf6da · schema v1 · pii pii-v1
Full breach record for Colorado State University - Pueblo →Colorado State University – Pueblo reported a phishing incident on August 14, 2024, where an employee was targeted by a social engineering attack impersonating the university controller. The employee sent an unprotected Excel spreadsheet containing student information (names, SSNs, DOBs, etc.) to an unauthorized third party. The breach was discovered on August 15, 2024. A total of 11,079 individuals were affected, including 4 New Hampshire residents. The university notified affected individuals electronically on August 18, 2024, and implemented additional employee cybersecurity training.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 14, 2024
Begins
Aug 15, 2024
Discovered
Sep 5, 2024
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Montana State AGbd_0ad8be01d2f0f9412024-09-05Verified
- Massachusetts State AGbd_d5c69f32d4ae7ba32024-09-05Verified
- Vermont State AGbd_e08271f0e5d8cffb2024-09-04 · +1dVerified
- Indiana State AGbd_4cbc52f0b9c4f0fa2024-08-18 · +18dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Aug 18 (IN), last Sep 5 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.