California State University, Northridge

The California Office of the Attorney General reported a data breach incident involving California State University Northridge (CSUN) on May 5, 2016. On April 5, 2016, an internal ID and password exposure potentially allowed unauthorized access to personal information of EOP student applicants, including names, addresses, Social Security Numbers, email addresses, and phone numbers. Although there was no evidence of unauthorized access or theft, CSUN is offering identity protection services to affected individuals.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-61666

TPRM report: https://www.rankiteo.com/company/tuc-csun

"id": "tuc306080425",
"linkid": "tuc-csun",
"type": "Breach",
"date": "4/2016",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'EOP student applicants',
                        'industry': 'Education',
                        'location': 'Northridge, California',
                        'name': 'California State University Northridge (CSUN)',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Internal ID and password exposure',
 'data_breach': {'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Social Security '
                                                         'Numbers',
                                                         'Email addresses',
                                                         'Phone numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'date_detected': '2016-04-05',
 'date_publicly_disclosed': '2016-05-05',
 'description': 'The California Office of the Attorney General reported a data '
                'breach incident involving California State University '
                'Northridge (CSUN) on May 5, 2016. On April 5, 2016, an '
                'internal ID and password exposure potentially allowed '
                'unauthorized access to personal information of EOP student '
                'applicants, including names, addresses, Social Security '
                'Numbers, email addresses, and phone numbers. Although there '
                'was no evidence of unauthorized access or theft, CSUN is '
                'offering identity protection services to affected '
                'individuals.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Social Security Numbers',
                                 'Email addresses',
                                 'Phone numbers'],
            'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2016-05-05',
                 'source': 'California Office of the Attorney General'}],
 'response': {'remediation_measures': 'Offering identity protection services '
                                      'to affected individuals'},
 'title': 'Data Breach at California State University Northridge',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized access due to exposed credentials'}