The Colorado State University System

Colorado State University - Pueblo reported a social engineering attack on August 14, 2024, targeting employees to access an unprotected Excel spreadsheet containing student names, IDs, and billing balances. Approximately 11,079 individuals were affected, including 2 Maine residents. Notification was sent electronically on August 18, 2024.

The Colorado State University System reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-17. 144 Massachusetts residents were affected. The report records the breach type as electronic.

Pension Benefit Information, LLC (PBI) notified the California AG of a data event involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer to access PBI's server on May 29-30, 2023, and downloaded data. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes names and other data elements. PBI patched servers, investigated the scope, and is offering credit monitoring via Kroll. The incident is contained.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party on May 29-30, 2023. The attacker accessed a PBI server and downloaded data containing names and other data elements. PBI patched servers, investigated, and offered credit monitoring services. The incident is classified as a third-party software vulnerability exploitation.

The Colorado State University System experienced an external system breach (hacking) on May 29, 2023, discovered on July 10, 2023. The incident compromised the names and Social Security Numbers of 19,344 individuals, including 29 Maine residents. The university provided written notification on July 12, 2023, and offered 24 months of credit monitoring and ID restoration services through Kroll.

The Colorado State University System reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-12. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 7/10/2023. Notice was sent on 7/12/2023.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party on May 29-30, 2023. The attacker downloaded PII, including names and government IDs, from PBI servers. PBI patched systems, investigated, and offered 24 months of credit monitoring. The incident is linked to the global Progress Software MOVEit vulnerability.

The Colorado State University System reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-13. The report records the breach type as electronic.

The Colorado State University System reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-12. 68 Indiana residents were affected. 19,344 individuals affected in total.