Michigan State University

Michigan State University reported an external system breach (hacking) on 05/25/2020 affecting 7,276 individuals, including 1 Maine resident. The breach compromised names and financial account numbers (combined with security codes/PINs). Notification was sent electronically on 02/08/2021, and 24 months of Experian IdentityWorks were provided.

Michigan State University notified NH AG of a data breach affecting ~2,600 shoppers. Unauthorized access to shop.msu.edu via a misconfigured admin account allowed insertion of malicious code (Oct 2019–Jun 2020) exposing names, addresses, and credit card details (including CVV). 4 NH residents affected. MSU engaged law enforcement/FBI, remediated the vulnerability, and offered 2 years of Experian IdentityWorks.

Michigan State University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-08-13. 12 Massachusetts residents were affected. The report records the breach type as electronic.

Michigan State University notified Montana residents that shop.msu.edu was compromised between Oct 2019 and Jun 2020. Attackers inserted malicious code enabling theft of names, addresses, and credit card data (including CVV). MSU removed the code, engaged law enforcement, and offered 2 years of Experian IdentityWorks.

Michigan State University reported a data breach to the Oregon Attorney General. The breach was reported on 2016-12-09. The breach occurred during 11/13/2016. Notice was sent on 11/22/2016.

Michigan State University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-11-30. 3,209 Massachusetts residents were affected. The report records the breach type as electronic.

Michigan State University reported a data security breach to the California Attorney General. The breach occurred on November 13, 2016. The provided source document contains only the filing metadata and a placeholder for the notice attachment; specific details regarding the nature of the breach, data types affected, and number of individuals impacted are not present in the extractable text.

Michigan State University notified affected individuals on November 22, 2016, of a cyberattack on November 13, 2016, that compromised personal information of current and former employees and students. Data included names, SSNs, and student IDs. The database was taken offline, and 24 months of identity protection were provided.

Michigan State University notified the NH Attorney General of a cyberattack on Nov 13, 2016, involving unauthorized access to a database containing PII of employees and students. 463 NH residents were affected. Data included names, SSNs, and ID numbers. The database was taken offline, law enforcement was engaged, and credit monitoring was offered.

Michigan State University notified affected individuals that on November 13, 2016, a cyberattack resulted in unauthorized access to a database containing employee and student records. Compromised data included names, SSNs, and IDs. The database was taken offline immediately, and 24 months of identity protection were offered.

Michigan State University notified the Washington AG of a cyberattack on Nov 13, 2016, involving unauthorized access to a database containing names, SSNs, and student/employee IDs. The database was taken offline immediately. MSU is notifying affected individuals and providing 24 months of identity protection services.