Syracuse University

Summary

Syracuse University experienced a data breach when an unauthorized individual accessed an employee's email account, compromising the names and Social Security numbers of approximately 9,800 students, alumni, and applicants. The intrusion occurred over a multi-day period, prompting the institution to notify affected individuals through formal correspondence after concluding its investigation into the incident.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On September 24, 2020, Syracuse University discovered unauthorized access to an employee’s email account, initiating an investigation into a data security incident. The breach persisted until September 28, 2020, during which an unauthorized party gained access to sensitive personal information stored within the compromised account. The exposed data included the full names and Social Security numbers of approximately 9,800 individuals affiliated with the university. Affected parties consisted of current students, alumni, and applicants whose information was processed through university systems. The breach did not impact all university constituents but specifically targeted those whose data resided in the breached email account. No evidence suggested broader network infiltration or compromise of other university systems beyond the single employee account. The incident represented a targeted email account compromise rather than a wide-scale cyberattack on institutional infrastructure.

Syracuse University responded by sending formal notification letters to all affected individuals following its investigation. These communications detailed the nature of the breach, specified the types of exposed personal information, and outlined protective measures available to victims. The university offered complimentary credit monitoring services to mitigate potential identity theft risks stemming from the Social Security number exposure. Recipients were advised to remain vigilant against financial fraud and unauthorized credit activity. The compromised Social Security numbers created significant risk for identity-related crimes given their sensitivity as permanent identifiers. While the university confirmed the breach's containment to the four-day access period, it did not disclose technical specifics regarding the intrusion method or account security deficiencies. No ransomware involvement or financial motive was indicated in the available reports. Affected individuals were directed to contact Experian for credit monitoring enrollment and fraud resolution assistance.

Sources

Sources available to members: 1 source.