University System of Georgia

The University System of Georgia experienced a data breach on May 28, 2023, due to unauthorized access via cybercriminals exploiting the MOVEit® Secure File Transfer software. Approximately 800,000 individuals were affected, potentially compromising data that included Social Security Numbers, bank account numbers, and driver's license information. The University System of Georgia has offered 12 months of complementary access to Experian IdentityWorks for identity protection.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5b9aff63-0dc1-429a-a5e4-6b8e6c859f02.shtml

TPRM report: https://www.rankiteo.com/company/university-system-of-georgia

"id": "uni809072625",
"linkid": "university-system-of-georgia",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 800000,
                        'industry': 'Education',
                        'location': 'Georgia, USA',
                        'name': 'University System of Georgia',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': '12 months of complementary access to Experian '
                        'IdentityWorks for identity protection',
 'data_breach': {'number_of_records_exposed': 800000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers',
                                              'bank account numbers',
                                              "driver's license information"]},
 'date_detected': '2023-05-28',
 'date_publicly_disclosed': '2024-05-07',
 'description': 'The University System of Georgia experienced a data breach '
                'due to unauthorized access via cybercriminals exploiting the '
                'MOVEit® Secure File Transfer software.',
 'impact': {'data_compromised': ['Social Security Numbers',
                                 'bank account numbers',
                                 "driver's license information"]},
 'initial_access_broker': {'entry_point': 'MOVEit® Secure File Transfer '
                                          'software'},
 'references': [{'date_accessed': '2024-05-07',
                 'source': 'Maine Office of the Attorney General'}],
 'threat_actor': 'Cybercriminals',
 'title': 'University System of Georgia Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit® Secure File Transfer software'}