University of Colorado

The Washington State Office of the Attorney General reported a data breach at the University of Colorado on April 13, 2021. The breach occurred between January 6, 2021, and January 25, 2021, due to a cyberattack on the vendor Accellion, affecting 3,511 Washington residents. Compromised data included names, dates of birth, health insurance information, medical information, and student ID numbers.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10447

TPRM report: https://www.rankiteo.com/company/university-of-colorado-medicine

"id": "uni554072725",
"linkid": "university-of-colorado-medicine",
"type": "Breach",
"date": "1/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 3511,
                        'industry': 'Education',
                        'location': 'Colorado',
                        'name': 'University of Colorado',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Cyberattack on Vendor',
 'data_breach': {'number_of_records_exposed': 3511,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'dates of birth',
                                              'health insurance information',
                                              'medical information',
                                              'student ID numbers']},
 'date_detected': '2021-01-06',
 'date_publicly_disclosed': '2021-04-13',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach at the University of Colorado on April 13, '
                '2021. The breach occurred between January 6, 2021, and '
                'January 25, 2021, due to a cyberattack on the vendor '
                'Accellion, affecting 3,511 Washington residents. Compromised '
                'data included names, dates of birth, health insurance '
                'information, medical information, and student ID numbers.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'health insurance information',
                                 'medical information',
                                 'student ID numbers']},
 'references': [{'date_accessed': '2021-04-13',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Data Breach at University of Colorado',
 'type': 'Data Breach'}