The Curators of the University of Missouri

University of Missouri confirmed that personal information was acquired by unauthorized individuals via a zero-day vulnerability in Progress Software's MOVEit Transfer application. The University engaged third-party experts, notified law enforcement, took the application offline, and applied patches. Affected individuals are offered two years of identity monitoring through Kroll.

The University of Missouri notified the New Hampshire Attorney General on October 25, 2023, of a data breach involving approximately 29 NH residents. The incident stemmed from a zero-day vulnerability in Progress Software's MOVEit Transfer application, disclosed by Progress on May 31, 2023. The University confirmed that personal information of affected individuals was acquired by unauthorized actors. The University engaged third-party experts, notified law enforcement, took the application offline, applied patches, and offered two years of Kroll identity monitoring services. The investigation concluded on September 9, 2023.

University of Missouri reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-25. 118 Massachusetts residents were affected. The report records the breach type as electronic.

The University of Missouri experienced an external system breach (hacking) that was discovered on September 9, 2023. The breach, which occurred on May 31, 2023, affected 36 Maine residents. The compromised information included names and Social Security numbers. The university notified the affected individuals on October 20, 2023, and offered 24 months of identity theft protection services through Kroll.

University of Missouri notified Vermont AG of a data breach caused by exploitation of a zero-day vulnerability in Progress Software's MOVEit Transfer application. The incident, confirmed on September 7, 2023, resulted in the exfiltration of personal information including names and government IDs. The University engaged forensic experts, notified law enforcement, patched the vulnerability, and provided two years of identity monitoring to affected individuals.

University of Missouri reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-31 and was reported on 2023-10-20. 204 Indiana residents were affected. 118,808 individuals affected in total.

University of Missouri Columbia School of Medicine notified Montana residents that unauthorized access to two employee email accounts occurred between April 16-30, 2019. The incident was discovered on July 16, 2019. Student PII was potentially exposed. No evidence of misuse was found. Credit monitoring was offered.