On May 15, 2017, the California Office of the Attorney General disclosed a data breach affecting The University of New Mexico Foundation, which occurred on February 16, 2017. An unauthorized individual gained access to the organization’s network, potentially exposing donor personal information. The exact number of impacted individuals remains undisclosed, but the breach posed risks such as identity theft, financial fraud, or reputational harm to donors. The incident highlights vulnerabilities in the foundation’s cybersecurity measures, particularly in safeguarding sensitive donor data. While no evidence suggested misuse of the exposed information, the breach underscored the need for stronger access controls, monitoring, and incident response protocols to prevent future intrusions. The foundation likely faced regulatory scrutiny and may have been required to notify affected parties, implement remediation steps, and enhance security frameworks to restore trust and compliance with data protection laws.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-68867
TPRM report: https://www.rankiteo.com/company/unmfund
"id": "unm258090125",
"linkid": "unmfund",
"type": "Breach",
"date": "2/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Unknown',
'industry': 'Education / Philanthropy',
'location': 'New Mexico, USA',
'name': 'The University of New Mexico Foundation',
'type': 'Non-profit organization'}],
'data_breach': {'number_of_records_exposed': 'Unknown',
'personally_identifiable_information': True,
'type_of_data_compromised': 'Donor personal information'},
'date_detected': '2017-02-16',
'date_publicly_disclosed': '2017-05-15',
'description': 'The California Office of the Attorney General reported a data '
'breach involving The University of New Mexico Foundation on '
'May 15, 2017. The breach occurred on February 16, 2017, when '
"an unauthorized individual accessed the organization's "
'network, potentially exposing donor personal information. The '
'specific number of individuals affected is unknown.',
'impact': {'data_compromised': 'Donor personal information',
'identity_theft_risk': 'Potential'},
'references': [{'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'California Office of '
'the Attorney General'},
'threat_actor': 'Unauthorized individual',
'title': 'Data Breach at The University of New Mexico Foundation',
'type': 'Data Breach'}