UNIVERSITY OF DETROIT MERCY

University of Detroit Mercy notified NH AG of a third-party vendor (Blackbaud) breach. Cybercriminals exfiltrated data (names, SSNs) from Blackbaud systems between Feb 7 and May 20, 2020, via ransomware attack. 28 NH residents affected. Notification sent Aug 14, 2020. Credit monitoring offered.

University of Detroit Mercy notified individuals of a data security incident involving its third-party vendor, Blackbaud. A ransomware attack on Blackbaud's systems resulted in the exfiltration of data between February 7, 2020, and May 20, 2020. The compromised data may have included full names and Social Security numbers. Blackbaud paid the ransom to ensure the destroyed backup file was permanently deleted. The university engaged external cybersecurity professionals and offered one year of complimentary credit monitoring to affected individuals.

University of Detroit Mercy reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-08-14. 141 Massachusetts residents were affected. The report records the breach type as electronic.

University of Detroit Mercy reported a data breach to the Indiana Attorney General. The breach occurred on 2020-02-07 and was reported on 2020-08-14. 230 Indiana residents were affected. 34,675 individuals affected in total.

UNIVERSITY OF DETROIT MERCY filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-296). The register records the breach as discovered on July 16, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.