Arizona State University
Arizona State University inadvertently exposed the email addresses of 1000 students in what is considered a breach of federal health privacy law.
The university notified 4,000 students on August 2019 that their email addresses were accidentally revealed.
In the breach, an ASU office sent bulk emails about health insurance renewal to students without masking the identity of recipients.
The unintended action was a breach of the Health Insurance Portability and Accountability Act. No protected health information was released aside from the student email addresses, the organization stated.
"id": "ARI03710423",
"linkid": "arizona-state-university",
"type": "Breach",
"date": "08/2019",
"severity": "25",
"impact": "2",
"explanation": "Attack limited on finance or reputation"