https://dorper.me/articles/unileak.aspx

  * Home
  * Hardware
      + Computers
      + MC68008 Calculator
      + Z80 Computer
      + PIC Surfboard
      + 8031 SBC
      + Dorptrum
      + 4-Bit Tekkit ALU
      + Mods
      + Autocoffee
      + Alarm Clock with a Headphone Jack
      + Power
      + Audi Internal Battery Charger
      + 9V to 5V Power Supply
      + Digital
      + 555 PWM Generator
      + Boolean Function Generator
      + Glue Logic Tester
      + DRAM Tester
      + Glue Logic RNG
      + TTL to RS232 Adapter
      + Games
      + 2-Player Glue Logic Reaction Time Game
      + Analog
      + Ring Detector
      + Sound
      + Microphone
      + SAA1099 Experiments
  * 
  * Software
      + Operating Systems
      + XtOS/S
      + XtOS/W
      + DOOPS
      + echidnaOS
      + Bootloaders
      + Limine
      + Bootable Keyboard Tester
      + Serial Bootloader
      + Communications
      + DorpWiki
      + Dch
      + Libraries
      + INI Parser
      + Tools
      + Easter Date Calculator
      + Good Friday Date Calculator
      + Screen Dimensions Calculator
      + Extension to Mimetype Converter
      + Online C/C++ Header Generator
      + RISContext
      + Based Multitool
      + Drudge Report Scraper
      + Fun
      + DogeBoot
      + Games
      + The Search for the Crystal
      + The Search for the Crystal 2
  * 
  * Services
      + LiteTube
      + Mirror
  * 
  * Misc
      + Windows XP Themes
      + Bill of Rights
  * Articles
  * Radio
  * Donate

Massive security breach at US universities.

US universities have been affected by a major data breach.

---------------------------------------------------------------------

A massive data breach has hit US Universities including Stanford
University, University of California, University of Miami, University
of Colorado Boulder, Yeshiva University, Syracuse University, and
University of Maryland, Baltimore. Hackers have stolen terabytes of
student, prospective student, and employee personal information
including transcripts, financial info, mailing addresses, phone
numbers, usernames, passwords and Social Security Numbers. These
breaches are part of the larger Accellion FTA leak which has affected
~50 organizations. Students who applied to these colleges (or even
have an account in the case of UC) are at risk of having their
personal and financial information leaked publicly online including
their Social Security Numbers. The hackers have sent emails to some
victims. If you receive one of these emails, do not click the
attached link unless you understand how to use Tor. The hackers are
holding the universities at ransom. Unless the universities pay the
ransom, the hackers will continue publishing student information.

Steps to take if you have been affected

1a. Change all of your passwords

While passwords are usually stored as hashes, it is still important
to change your passwords after a data breach because poor security
practices can allow for your password to be decoded using a Rainbow
table.

1b. Enable Two Factor Authentication

If you want to stay super-safe, you can enable two factor
authentication on your accounts. Two factor authentication secures
your account by requiring a second form of authentication. For
example, a phone app that generates a temporary security code that
resets every 30 seconds or a smart card.

2. Check your bank statements

Check your bank statements to make sure that no unauthorized payments
have been made. If you believe your card number has been exposed, ask
your bank for a new card number.

3a. Check your credit report

If you believe that your Social Security Number has been compromised
you can get a free credit report from each of the three credit
bureaus (Equifax, Experian, and TransUnion).

3b. Freeze your credit

To prevent identity fraud, you can freeze your credit. Freezing your
credit prevents anyone from opening new credit (e.g. a credit card)
in your name. You must freeze your credit with all three credit
bureaus. Freezing your credit on one will not freeze your credit on
the other two.

  * Equifax
  * Experian
  * TransUnion

Sources

Responses from universities are in bold.

  * ACCELLION: Mandiant validates full remediation of all known
    security vulnerabilities in the FTA product
  * CAMPUS LIFE SECURITY: Data Breach at Syracuse University Leaves
    Almost 10,000 Names, SSNs Exposed
  * BLEEPING COMPUTER: Ransomware gang leaks data stolen from
    Colorado, Miami universities
  * UNIVERSITY OF COLORADO: About the Accellion Cyberattack
  * ZDNET: Ransomware group targets universities in Maryland,
    California in new data leaks
  * FTC: Identity Theft Recovery Steps
  * UCNET: UC part of nationwide cyber attack
  * UCNET: Five rules for protecting your security online
  * UC BERKELEY: UC Email Security Incident... [JPG 359K]
  * UCLA: Further Update [TXT 1389B]
  * Full list of breached organizations [PNG 37.4K]
  * UC DAVIS: UC Among Targets in Nationwide Cyberattack
  * DATABREACHES.NET: Accellion's data breach left clients in tough
    position: pay extortion to criminals, or have their data dumped
    (with updates)
  * DATABREACHES.NET: Threat actors leak files with protected health
    information from U. Miami
  * HACKREAD: Cl0p ransomware gang leaks sensitive data from 6 US
    universites
  * DAILY BRUIN: Nationwide cyberattack targets personal information
    of some in UC community
  * DAILYCAL: Nationwide cybersecurity attack compromises UC employee
    data
  * MIAMI HERALD: Hackers hit University of Miami, posted patients'
    private info. School won't discuss details
  * CNOBIN, domain provider for extorters email, refuse to
    investigate. [TXT 6768B]
  * SECURITY: Clop ransomware gang breaches University of Colorado
    and University of Miami
  * Ransom E-Mail [TXT 451B]
  * RANSOMWATCH: View extorters websites without compromising your or
    anyone else's data.
  * STANFORD DAILY: Hackers leak SSNs and student data in massive
    data breach

Discussion Threads

  * R/BERKELEY: Oof
  * R/UCI: UC Data Breach
  * R/UCLA: UC Data Breach
  * R/UCR: UC Data Breach
  * R/STANFORD: Massive Security Breach at US Universities
  * HACKERNEWS: Security Breach at US Universities

Updates

4/1/21

  * Hackers post 1.3 GB of UC data and 10 GB of Stanford data.
  * After Dorper contacted the ISP of the IP address that the hackers
    were using to extort money, the IP address has been suspended.
  * Hackers appear to be posting one new download link per day.

3/31/21

  * Hackers post first 1.3 GB UC and Stanford data dump on their
    website.
  * University of California releases a statement.
  * UC Davis releases a statement.

3/30/21

  * E-mails sent out to victims.

3/29/21

  * Hackers created page for UC and Stanford.

More

  * CONTACT DORPER




---------------------------------------------------------------------

Copyright (c) 2014-2021 Dorper

Dark Mode