National Student Clearinghouse

Supplemental notice to NH AG regarding National Student Clearinghouse MOVEit Transfer breach. Incident occurred ~May 30, 2023; discovered May 31, 2023. 1,695 NH residents notified. Data included PII/SSNs. Third-party vendor Progress Software involved. Remediation: patches applied, monitoring enhanced, credit monitoring offered.

National Student Clearinghouse, a non-profit organization, experienced an external system breach (hacking) on May 30, 2023. The breach was discovered on June 20, 2023. The incident affected 855 Maine residents, compromising their names and Social Security numbers. The organization began notifying affected individuals on August 30, 2023, and offered 24 months of identity monitoring services through Kroll.

National Student Clearinghouse notified individuals of a data breach involving its third-party software provider, Progress Software, and its MOVEit Transfer solution. An unauthorized party obtained files containing personal information (name, DOB, contact info, SSN, student ID, school records) on or around May 30, 2023. The Clearinghouse was informed on May 31, 2023, and confirmed exfiltration on June 20, 2023. The organization engaged cybersecurity experts, coordinated with law enforcement, patched the software, and offered two years of identity monitoring.

National Student Clearinghouse notified South Carolina of a data breach involving its third-party vendor, Progress Software's MOVEit Transfer solution. Unauthorized access occurred around May 30, 2023, and was discovered on June 20, 2023. Affected data included names, DOBs, SSNs, and student records. The company engaged forensic experts, patched systems, and offered two years of identity monitoring.

National Student Clearinghouse filed a supplemental breach notification with the Washington State AG regarding a third-party supply chain compromise involving Progress Software's MOVEit Transfer solution. Unauthorized access occurred on or around May 30, 2023, and was discovered on June 20, 2023. The incident affected 5,207 Washington residents, exposing names, SSNs, and DOBs. The Clearinghouse patched the software, engaged forensic experts, and offered two years of identity monitoring.

National Student Clearinghouse notified individuals of a data breach involving its third-party provider, Progress Software, and its MOVEit Transfer solution. An unauthorized party obtained files containing personal information (name, DOB, SSN, student records) on or around May 30, 2023. The Clearinghouse was informed on May 31, 2023, and confirmed exfiltration on June 20, 2023. The organization engaged cybersecurity experts, coordinated with law enforcement, patched the software, and offered two years of identity monitoring.

National Student Clearinghouse reported a data breach to the Oregon Attorney General. The breach was reported on 2023-09-21. 227,553 individuals were affected.

National Student Clearinghouse notified NH AG of a data security issue involving its third-party provider, Progress Software's MOVEit Transfer solution. The incident occurred on or around May 30, 2023. Approximately 103 New Hampshire residents were affected. The Clearinghouse coordinated with law enforcement and offered 24 months of free identity monitoring services.

National Student Clearinghouse reported an external system breach (hacking) occurring on May 30, 2023, discovered on June 20, 2023. The incident compromised names and Social Security Numbers of 51,689 individuals, including 61 Maine residents. The entity provided written notification on August 31, 2023, and offered 24 months of identity monitoring services via Kroll.

National Student Clearinghouse reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-31. 198 Massachusetts residents were affected. The report records the breach type as electronic.

National Student Clearinghouse notified Montana residents of a data breach involving its MOVEit Transfer provider, Progress Software. Unauthorized access occurred around May 30, 2023, discovered May 31, 2023. Exfiltrated data included names, DOBs, SSNs, and student records. The Clearinghouse patched the software, engaged experts, and offers two years of identity monitoring.

National Student Clearinghouse notified Vermont AG of a data breach involving its third-party provider, Progress Software's MOVEit Transfer tool. The incident, occurring around May 30, 2023, resulted in the exfiltration of personal information including names, DOBs, SSNs, and student records. The Clearinghouse patched the software, engaged forensic experts, and offered two years of identity monitoring.

National Student Clearing House reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-30 and was reported on 2023-08-31. 56 Indiana residents were affected. 51,689 individuals affected in total.

National Student Clearinghouse notified Delaware AG of a breach involving its third-party provider, Progress Software's MOVEit Transfer solution. The incident occurred around May 30, 2023, when an unauthorized party accessed files containing names, DOBs, SSNs, and student records. The Clearinghouse patched the software, engaged forensic experts, coordinated with law enforcement, and offered two years of free identity monitoring.

National Student Clearinghouse

NATIONAL STUDENT CLEARINGHOUSE filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-649). The register records the breach as discovered on May 30, 2023. Additional entities named: MOVEIT. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.