University of Missouri

The University of Missouri reported a data breach on October 24, 2023, involving a Zero-Day vulnerability in the MOVEit® Transfer application, which occurred on May 31, 2023. The breach affected approximately 118,808 individuals, with specific personal information, including Social Security Numbers, being compromised. The breach was discovered on September 9, 2023, and identity theft protection services were offered for 24 months through Kroll.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/930d1415-2db8-4bad-b7a7-f2b0cb0ca1a5.shtml

TPRM report: https://www.rankiteo.com/company/university-of-missouri-system

"id": "uni306072825",
"linkid": "university-of-missouri-system",
"type": "Vulnerability",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 118808,
                        'industry': 'Education',
                        'location': 'Missouri, USA',
                        'name': 'University of Missouri',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Zero-Day Vulnerability',
 'data_breach': {'number_of_records_exposed': 118808,
                 'personally_identifiable_information': ['Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2023-09-09',
 'date_publicly_disclosed': '2023-10-24',
 'description': 'The University of Missouri reported a data breach involving a '
                'Zero-Day vulnerability in the MOVEit® Transfer application, '
                'affecting approximately 118,808 individuals with personal '
                'information, including Social Security Numbers, being '
                'compromised.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High'},
 'references': [{'source': 'University of Missouri'}],
 'response': {'third_party_assistance': ['Kroll']},
 'title': 'University of Missouri Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit® Transfer application'}