Massachusetts College of Pharmacy and Health Sciences Data Breach
Date: May, 2023In Massachusetts, the College of Pharmacy and Health Sciences (MCPHS) is a prestigious institution honored as the best pre-med studies option in the US. MCPHS is the most recent academic pillar to report a data breach concerning the MOVEit zero-day vulnerability.
What Was the Breach?
- Full Names
- Social Security Numbers
How Did the Breach Occur?
The breach occurred with two of MCPHS’ third-party vendors following the global cybersecurity event involving MOVEit. MOVEit is a file transfer software that hackers took advantage of using a zero-day vulnerability. CCBIZ provides the technology environment to Mayer Hoffman, which provides accounting services to clients like MCPHS.
When Did This Breach Occur?
On May 31st, 2023, Progress Software announced the zero-day vulnerability issue with their MOVEit software, which prompted investigations. CCBIZ’s investigation concluded with breach confirmation that the leak occurred between May 29th and June 5th, 2023. They presumably began notifying the necessary parties after the conclusion, resulting in consumer notifications sent around November 3rd, 2023.
Who Does the Breach Impact?
The notice provided to the Maine Attorney General’s Office states the unauthorized party accessed the files and downloaded them; this means the bad actors may have accessed more information than listed on the report. Further, the Maine filing lists 899 individuals possibly impacted.
How Many Files Does the Breach Affect?
The exact number of impacted files from the breach is unknown. It could be that the attackers accessed no other files and took no more than 900. Whatever your association with MCPHS, take time to protect yourself from the consequences of this breach.
Recent Breaches
Cisco Duo Breach
Cisco Duo is an access security provider that offers solutions for small business and commercial control products, including multi-factor authentication (MFA), single sign-on, and access control services....
AT&T Breach
American Telephone and Telegraph Company (AT&T) is the fourth-largest telecommunications provider, behind Verizon, Comcast, and China’s state-funded communications solution...
Fujitsu Limited Breach
Fujitsu Limited is the world’s sixth-largest IT service provider. Based in the Minato City ward of Tokyo, Japan, Fujitsu offers various technology solutions for personal and commercial use...
Cybersecurity and Infrastructure Security Agency Breach
The CISA collaborates with other government agencies to notify victims of breaches and respond to threats. These include the Federal Bureau of Investigation, the Multi-State Information Sharing & Analysis...
Roku Inc. Breach
Roku is a global streaming and entertainment organization. It offers solutions for direct streaming, live channels, music, niche channel entertainment, smart home devices, travel technology, audio options,...