The Colorado State University System

Colorado State University – Pueblo notified consumers of a cybersecurity event on August 14, 2024, where employees were targeted by a social engineering attack. An unprotected Excel spreadsheet containing names, CSU ID numbers, and current billing balances was obtained by an unauthorized third party. No other systems were breached. The notice was filed with the Vermont Attorney General on September 4, 2024.

Pension Benefit Information, LLC (PBI) notified the California AG of a data event involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer to access PBI's server on May 29-30, 2023, and downloaded data. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes names and other data elements. PBI patched servers, investigated the scope, and is offering credit monitoring via Kroll. The incident is contained.

The Colorado State University System experienced an external system breach (hacking) on May 29, 2023, discovered on July 10, 2023. The incident compromised the names and Social Security Numbers of 19,344 individuals, including 29 Maine residents. The university provided written notification on July 12, 2023, and offered 24 months of credit monitoring and ID restoration services through Kroll.

The Colorado State University System reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-12. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 7/10/2023. Notice was sent on 7/12/2023.