USG, a state government entity overseeing 26 public colleges and universities in Georgia, serves a student body exceeding 340,000.
The University System of Georgia (USG) is issuing data breach notifications to 800,000 individuals whose information was compromised during the Clop MOVEit attacks of 2023.
USG, a state government entity overseeing 26 public colleges and universities in Georgia, serves a student body exceeding 340,000.
In late May 2023, the Clop ransomware group utilized a zero-day vulnerability in the Progress Software MOVEit Secure File Transfer solution to execute a large-scale global data theft operation.
Notifications of a data breach were dispatched from April 15 to April 17, 2024, alerting recipients that cybercriminals had gained unauthorized access to the following information:
- Full or partial (last four digits) of Social Security Number
- Date of Birth
- Bank account number(s)
- Federal income tax documents with Tax ID number
Since the number of affected individuals exceeds the number of current students within the USG, due to the nature of the information involved, the incident is likely to involve former students, faculty members, contractors, and other personnel.
"MOVEit Transfer software operating at USG was immediately blocked upon detection of the breach on May 31, 2023, and has now been fully updated and secured in accordance with guidance from Progress Software and CISA. After updating and securing the system, USG immediately began a lengthy investigation to determine which individuals may have been impacted by the incident."
The letter does not include further information from the filing in Maine, which indicates that driving license numbers might also be part of the compromised data.
Those affected by the USG's MOVEit breach have been provided with the standard offer of 12 months of credit monitoring by Experian, a credit reference agency.
"USG regrets any inconvenience or concern caused by this incident" is the closest the government department came to an apology.
Want your digital assets to be protected?
CyberShelter provides innovative and modern cybersecurity products and niche services to individuals and organization against all kinds of cyber threats.
For the latest cyber threats and the latest hacking news please follow us on Facebook, Linkedin, and Twitter.