#Uc data breach software#
#Uc data breach series#
#Uc data breach free#

22 identifying UNC2546 as the party responsible for the series of previously reported attacks. The incident was the beginning of a “concerted cyberattack” on the FTA that continued into January 2021.Īccellion issued a statement on Feb.

#Uc data breach software#

In mid-December 2020, Accellion discovered a P0 vulnerability in their FTA software after it was exploited in a cybersecurity attack. We are at a greater risk of having our identities stolen for the rest of our lives,” Stitt said in the petition. “One year of credit monitoring will not protect us, the threat of identity theft now that our have been exposed will not suddenly disappear after one year.

#Uc data breach free#

In response to the cyber attack, UCSC senior Hannah Stitt started a petition for UC to extend their one-year free identity monitoring to a lifetime subscription on April 22. UCI OIT Security has also provided additional resources to minimize the impact of a personal data leak.ĭespite the UC notifying students and faculty of the data breach on March 31, the information was not widespread until students took to social media platforms, such as Twitter, to alert alumni and other members of the UC community. UCI Health has created a printable sheet of preventative measures and links to resources for the UC community to protect themselves from identity theft. Outside of signing up for Experian, UC is recommending individuals to take further steps to prevent identity theft, including placing fraud alerts on credit files, monitoring bank account statements and freezing credit reports across all three nationwide credit bureaus. “From not supporting students in their rent crisis and hefty tuition rates, not giving Black students the proper resources and recognition during a time of intense trauma, and this frankly embarrassing lack of protection for student privacy, the higher ups of the UCs have shown that they are not for the students.” “Through this past year, the disregard for students has become abundantly clear,” she said. “The same week this incident was announced, many UC employees also got notified that their health insurance provider ‘Health Net’ had a similar incident and are also providing a year of monitoring.”Ī former New University staff member and UC employee spoke with the New University regarding the leak of her Social Security number. “Those that have enrolled in the monitoring service are now receiving alerts that their social security numbers and other sensitive information was found on the dark web,” Chief Information Security Officer and Director of Information Security Joshua J. The service offers identity restoration as well as 24/7 search for trading and selling of personal information on the dark web. In response to the data breach, UC is providing members of the UC community a complimentary one-year subscription to Experian IdentityWorks, a credit monitoring and identity theft protection service. Individuals who receive emails threatening to publish stolen personal information are advised to forward them to their local information security department.Īccording to UC, the stolen information “includes but is not limited to names, addresses, telephone numbers, birth dates, Social Security numbers and bank account information for a range of UC populations, including employees and their dependents and beneficiaries, retirees and their beneficiaries, students and their families, and potentially other individuals with connections to UC.” “The attackers are threatening to publish, or have published, stolen information on the dark web in an attempt to extort organizations and individuals,” UCOP said in a UC-wide email on April 2. The perpetrators “gained access to files and confidential personal information by exploiting a vulnerability” in Accellion’s File Transfer Appliance (FTA), which is used by the UC for transference of sensitive information. The University of California Office of the President (UCOP) announced that UC was subject to a nation-wide cybersecurity attack on March 31.