The University of Colorado declined to pay a $17 million ransom demand after a data breach compromised more than 310,000 university records. Officials say the breach exposed some students’ grades and transcript data, visa and disability status, medical and prescription information and fewer than 20 Social Security numbers.
The attack targeted a vulnerability in the File Transfer Appliance from Accellion, a third-party vendor. CU Boulder was notified of the data breach on Jan. 25. The university’s Office of Information Security determined files uploaded by 447 CU users were at risk of unauthorized access.
Scroll down for more from UB