UnitedHealthcare Student Resources
ent_cb677159602fba0495df18ad
Disclosures
9
State AG · Leak Site · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
398,319
nationwide · State AG OR
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- UnitedHealthcare Student Resources
- Normalized
- unitedhealthcare student resources— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- myaccount.uhcsr.com
Disclosure history (9)newest first
- Washington State AGas victim2023-07-26
UnitedHealthcare Student Resources reported a cyberattack involving the exploitation of a zero-day vulnerability in Progress Software's MOVEit transfer software. The incident, occurring on May 27, 2023, and discovered on June 1, 2023, exposed PHI, PII, and financial claim data for 1,592 Washington residents. The company took the server offline, applied patches, and notified law enforcement.
- Indiana State AGas victim2023-07-22
UnitedHealthcare Student Resources reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-27 and was reported on 2023-07-22. 8,260 Indiana residents were affected. 389,319 individuals affected in total.
- Delaware State AGas victim2023-07-21
UnitedHealthcare Student Resources disclosed a breach involving the MOVEit Transfer software vulnerability (zero-day) exploited starting May 27, 2023. Suspicious activity was detected on June 1, 2023. The incident impacted member data including names, SSNs, DOBs, and health claim information. The company took the server offline, applied patches, notified law enforcement, and offered two years of identity theft protection.
- Oregon State AGas victim2023-07-21
UnitedHealthcare Student Resources reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-21. 398,319 individuals were affected.
- California State AGas victim2023-07-21
UnitedHealthcare Student Resources disclosed a data breach involving the exploitation of a zero-day vulnerability in Progress Software's MOVEit Transfer product. The incident occurred on May 27, 2023, and was discovered on June 1, 2023. Affected data included names, SSNs, health information, and financial claim details. The company took the server offline, applied patches, and offered identity theft protection.
- Massachusetts State AGas victim2023-07-21
UnitedHealthcare Student Resources reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-21. 14,899 Massachusetts residents were affected. The report records the breach type as electronic.
- Illinois State AGas victim2023-01-01
UNITED HEALTHCARE STUDENT RESOURCES filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-498). The register records the breach as discovered on May 27, 2023. Additional entities named: MOVEIT. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2023-01-01
UNITED HEALTHCARE STUDENT RESOURCES filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-396). The register records the breach as discovered on February 19, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2021-07-27
uhcsr.com
Supply-chain cascadesreviewed and confirmed
- UnitedHealthcare Student Resources’s filing is one of at least 97 in the Progress Software Corporation supply-chain incident (2023).