CHAPMAN UNIVERSITY

Chapman University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-22. 5 Massachusetts residents were affected. The report records the breach type as electronic.

Chapman University reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-10 and was reported on 2021-03-10. 5 Indiana residents were affected. 297 individuals affected in total.

Chapman University reported the loss of an external hard drive from its Harry and Diane Rinker Health Science Campus on October 17, 2017. The drive belonged to an employee with access to network drives containing W-9 forms. The university treated all accessible data as potentially compromised. Affected individuals were offered one year of Experian IdentityWorks credit monitoring. The university plans additional security training for faculty and staff.

Chapman University discovered on February 27, 2013, that electronic documents containing personal information (names, SSNs, student IDs, DOBs) could have been viewed by authenticated users of the university system due to a vulnerability found during standard security testing. The documents were immediately blocked. No evidence of unauthorized access exists. Affected individuals were offered 12 months of identity monitoring.

Chapman University notified the NH AG of a breach affecting 3 NH residents. On Feb 27, 2013, the university discovered that authenticated users could view documents containing names, SSNs, student IDs, and DOBs. No evidence of actual misuse was found. Notifications mailed April 12, 2013, including 1-year credit monitoring.

Chapman University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-02-24. 68 Massachusetts residents were affected. The report records the breach type as electronic.

Chapman University notified the NH Attorney General of a breach affecting 15 NH residents. On Feb 15, 2011, an authenticated user accessed a document containing names, SSNs, student IDs, and financial aid info. Access was blocked immediately. Notifications mailed Feb 22, 2011, with 1-year credit monitoring offered.