University of California data breach: 547K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2021-06-20
In December 2020, the University of California suffered a data breach due to vulnerability in in a third-party provider, Accellion. The breach exposed extensive personal data on both students and staff including 547 thousand unique email addresses, names, dates of birth, genders, social security numbers, ethnicities and other academic related data attributes. Further analysis is available in Exploring the Impact of the UC Data Breach. The data was provided to HIBP courtesy of Cyril Gorlla. Exposed data: dates of birth, education levels, email addresses, ethnicities, genders, job titles, names, phone numbers, physical addresses, social security numbers. The breach dates from Dec 24, 2020; Have I Been Pwned loaded it on Jun 20, 2021.
What to do
- If you had a University of California account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
