Colorado State University - Pueblo

The Vermont Office of the Attorney General reported a data breach at Colorado State University – Pueblo on September 4, 2024. The breach involved a social engineering attack on August 14, 2024, which resulted in unauthorized access to an unprotected Excel spreadsheet containing personal information including names, CSU ID numbers, and current billing balances for some individuals. Approximately two Rhode Island residents may have been impacted.

Source: https://ago.vermont.gov/document/2024-09-04-colorado-state-university-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/hasanschoolofbusiness

"id": "has018072625",
"linkid": "hasanschoolofbusiness",
"type": "Breach",
"date": "8/2024",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 'Approximately two Rhode Island '
                                              'residents',
                        'industry': 'Education',
                        'location': 'Pueblo, Colorado',
                        'name': 'Colorado State University – Pueblo',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Social Engineering',
 'data_breach': {'file_types_exposed': ['Excel Spreadsheet'],
                 'personally_identifiable_information': ['Names',
                                                         'CSU ID numbers'],
                 'type_of_data_compromised': ['Names',
                                              'CSU ID numbers',
                                              'Current billing balances']},
 'date_detected': '2024-08-14',
 'date_publicly_disclosed': '2024-09-04',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach at Colorado State University – Pueblo on September 4, '
                '2024. The breach involved a social engineering attack on '
                'August 14, 2024, which resulted in unauthorized access to an '
                'unprotected Excel spreadsheet containing personal information '
                'including names, CSU ID numbers, and current billing balances '
                'for some individuals. Approximately two Rhode Island '
                'residents may have been impacted.',
 'impact': {'data_compromised': ['Names',
                                 'CSU ID numbers',
                                 'Current billing balances']},
 'references': [{'date_accessed': '2024-09-04',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at Colorado State University – Pueblo',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unprotected Excel Spreadsheet'}