University of Massachusetts Amherst
ent_a4a2de815afa3b222c9de60e
Disclosures
20
State AG · HHS OCR enforcement · HHS OCR · 2 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
100,000
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- University of Massachusetts Amherst
- Normalized
- university of massachusetts amherst— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- umass.edu
Disclosure history (20)newest first
- Massachusetts State AGas victim2026-07-23
University of Massachusetts Amherst notified individuals on July 20, 2026, regarding a data security event involving names, addresses, Social Security numbers, and bank account/routing numbers. The university offered two years of Experian IdentityWorks. The incident status is contained, with no specific discovery or occurrence dates provided in the notice.
- Massachusetts State AGas victim2026-04-27
The University of Massachusetts Amherst notified a Massachusetts resident of a data security event involving their personal information. The letter, dated April 23, 2026, states that there is no evidence of further dissemination or fraudulent use. As a precaution, the university is offering two years of complimentary Experian IdentityWorks identity protection. The university has implemented additional safeguards and technical security measures. Specific dates of discovery or occurrence, the nature of the breach, and the number of affected individuals are not disclosed in this individual notice.
- Massachusetts State AGas victim2026-02-20
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2026-02-20. 41 Massachusetts residents were affected.
- Massachusetts State AGas victim2026-01-27
University of Massachusetts Amherst notified individuals that a data security event on December 15, 2025, may have resulted in unauthorized access to their names and driver's license numbers. The university stated there is no evidence the information was disseminated or used for fraud. Affected individuals were advised to place security freezes on their credit reports.
- Massachusetts State AGas victim2025-02-18
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-18. 5 Massachusetts residents were affected.
- Massachusetts State AGas victim2023-03-23
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-23. 47 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2020-09-02
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-09-02. 6 Massachusetts residents were affected. The report records the breach type as electronic.
- FEDERALHHS OCR enforcementas victim2016-11-22
UMass Amherst settled potential HIPAA Privacy and Security Rules violations involving a malware infection. The settlement includes a corrective action plan and a monetary payment of $650,000.
- Massachusetts State AGas victim2016-05-20
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-05-20. 24 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas reporting2015-04-01
Umass Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-04-01. 175 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2013-09-23
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-09-23. 5 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2013-06-10
University of Massachusetts - Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-06-10. 1,472 Massachusetts residents were affected. The report records the breach type as electronic.
- MASSACHUSETTSHHS OCRas reporting2013-06-05
University of Massachusetts Amherst (UMass) reported to HHS OCR on 2013-06-05 a Hacking/IT Incident affecting 1,670 individuals. A workstation at UMass's Center for Language, Speech, and Hearing was infected with a generic remote access Trojan (RAT), exposing ePHI including names, addresses, SSNs, dates of birth, health insurance information, diagnoses, and procedure codes. UMass lacked a firewall. HHS OCR settled for $650,000 with a corrective action plan. Breached information located on a Desktop Computer.
- Massachusetts State AGas victim2013-02-19
University of Massachusetts - Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-02-19. 290 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2012-03-26
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-03-26. 2 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2011-01-10
University of Massachusetts - Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-01-10. 211 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2010-10-05
University of Massachusetts - Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-10-05. 1,313 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas reporting2010-09-20
UMass Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-09-20. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2010-05-24
University of Massachusetts Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-05-24. 741 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2009-08-03
University of Massachusetts - Amherst reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2009-08-03. 100,000 Massachusetts residents were affected. The report records the breach type as electronic.