UNIVERSITY OF SOUTHERN CALIFORNIA

Conifer Revenue Cycle Solutions, LLC, a business associate of USC, experienced a data security incident involving unauthorized access to a Microsoft Office 365 business email account. The unauthorized access occurred on January 20, 2022, and was discovered by Conifer on April 14, 2022. USC was notified on August 12, 2022. The incident potentially exposed personal information of 7 New Hampshire residents, including names, SSNs, financial account numbers, and health information. Conifer reset passwords, blocked malicious IPs, and accelerated MFA implementation. IDX provided 12 months of identity protection services.

University of Southern California (USC) notified the New Hampshire Attorney General on May 6, 2022, regarding a data incident involving a lost external hard drive. A professor misplaced the drive on or about September 28, 2021. USC discovered the loss on October 1, 2021. The drive contained academic records and Social Security numbers for one New Hampshire resident. No evidence of misappropriation was found. USC notified the individual on April 26, 2022, and offered identity protection services.

University of Southern California (USC) notified individuals that a professor lost an external hard drive on September 28, 2021. USC learned of the loss on October 1, 2021. The drive contained student academic information, including grade sheets. USC investigated and determined that some personal information may have been stored on the device. No evidence of misuse was found. USC offered complimentary identity theft protection services.

The University of Southern California experienced a data breach involving the loss or theft of a device, impacting one resident of Maine. The incident occurred on September 28, 2021, and was discovered on November 18, 2021. The compromised data included names and Social Security numbers. In response, the university offered 12 months of credit monitoring and identity protection services through IDX.

University of Southern California reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-12-22. 11 Massachusetts residents were affected. The report records the breach type as electronic.

University of Southern California (USC) notified the California Attorney General of a data breach involving the loss of an external hard drive by a professor on September 28, 2021. USC discovered the loss on October 1, 2021. The drive contained student academic information, including grade sheets, names, and Social Security numbers. USC investigated and reviewed backups, determined no evidence of misuse, and offered identity monitoring services to affected individuals.

University of Southern California notified Montana residents that a professor lost an external hard drive containing student names and SSNs. USC discovered the loss on Oct 1, 2021, and offered credit monitoring services.

University of Southern California reported a data breach to the Indiana Attorney General. The breach occurred on 2021-09-28 and was reported on 2021-12-02. 2 Indiana residents were affected. 1,239 individuals affected in total.

University of California experienced a security event on December 24, 2020, where perpetrators exploited a vulnerability in its Accellion file transfer appliance. Unauthorized access to personal information including names, SSNs, financial data, and health information was confirmed. The University took the system offline, patched the vulnerability, and engaged forensic experts. Free credit monitoring was provided to affected community members.

California Attorney General's Office data breach report (SB24-62772) filed by the University of Southern California on behalf of KUSC. The filing is a sample notification; specific details regarding the incident date, affected data types, or number of individuals are not provided in the source text.

University of Southern California disclosed a breach affecting credit card purchases at dining facilities on its University Park and Health Sciences campuses. Credit card numbers were obtained illegally through a breach in a third-party software system used to process transactions between May 21 and June 21, 2012. No personally identifiable information was compromised. USC disabled the system, engaged Ernst & Young for forensic investigation, and notified affected individuals.