Colorado State University - Pueblo

Colorado State University – Pueblo notified affected individuals of a cybersecurity incident on August 14, 2024. Employees were targeted by a social engineering attack, resulting in unauthorized access to an unprotected Excel spreadsheet containing student names, ID numbers, and billing balances. No university systems were breached. The incident was limited in scope.

Colorado State University Pueblo reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-09-05. 40 Massachusetts residents were affected.

Colorado State University – Pueblo reported a phishing incident on August 14, 2024, where an employee was targeted by a social engineering attack impersonating the university controller. The employee sent an unprotected Excel spreadsheet containing student information (names, SSNs, DOBs, etc.) to an unauthorized third party. The breach was discovered on August 15, 2024. A total of 11,079 individuals were affected, including 4 New Hampshire residents. The university notified affected individuals electronically on August 18, 2024, and implemented additional employee cybersecurity training.

On August 14, 2024, Colorado State University – Pueblo employees were targeted by a social engineering attack, resulting in an unauthorized third party obtaining an unprotected Excel spreadsheet. The file contained first and last names, CSU ID numbers, and current billing balances. The attacker did not breach university computer systems. The incident is resolved.

Colorado State University Board Governors dba Colorado State University Puebl reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-15 and was reported on 2024-08-18. 22 Indiana residents were affected. 11,079 individuals affected in total.