{"id":16708,"date":"2023-08-31T13:58:01","date_gmt":"2023-08-31T20:58:01","guid":{"rendered":"https:\/\/in.nau.edu\/its\/?page_id=16708"},"modified":"2023-09-18T10:13:55","modified_gmt":"2023-09-18T17:13:55","slug":"3rd-party-db-notifs","status":"publish","type":"page","link":"https:\/\/in.nau.edu\/its\/3rd-party-db-notifs\/","title":{"rendered":"Third-Party Data Breach Notifications"},"content":{"rendered":"<h2>Third-Party Data Breach Notifications<\/h2>\n<p><em><span style=\"color: #999999;\">May 2023 &#8211; Northern Arizona University Information Technology Services<\/span><\/em><\/p>\n<div class=\"eplus-bg-color-row bg-color-extra-light-gray\"><div class=\"eplus-bg-color-row-content\">\n<p>On <strong>May 31st, 2023<\/strong>, third-party software provider <strong>Progress Software<\/strong> announced a security vulnerability related to their <strong>MOVEit Transfer<\/strong> software, potentially affecting thousands of organizations worldwide.<\/p>\n<p><strong>MOVEit Transfer<\/strong> is a software tool used by many organizations, including the <strong>Clearinghouse<\/strong>, to support the transfer of files. According to <strong>Progress Software<\/strong>, an unauthorized third party discovered a vulnerability in the<strong> MOVEit Transfer<\/strong> software that could allow unauthorized access to files transferred through the tool.<\/p>\n<p>Subsequently,<a href=\"https:\/\/techcrunch.com\/2023\/06\/29\/millions-affected-moveit-mass-hacks\/?guccounter=1&amp;guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&amp;guce_referrer_sig=AQAAAMHLe0vwSpEOW_mSImx75_2IbtmOK2_fg3KyDunDBckEGdN-p6ZeSFRgrxKFDD-SK3o7XF49Pa0WmC7K5lEqwZS4xPMptIOS_4v_TSjwGn4wlrCVAMbcKiWqf0bbAANgNscG1jvs9k59wFlvQInCs8RN8zi7OGHQmb9BmG_SMMA7\"><strong> national news media reported<\/strong><\/a> that many businesses and organizations worldwide are impacted by a cybersecurity incident related to a widely used filesharing application known as <strong>MOVEit Transfer<\/strong>.<\/p>\n<p>While Northern Arizona University<strong> does not use<\/strong> the <strong>MOVEit<\/strong> software, NAU has received notifications from third-party service providers that personally identifiable information from some NAU students and employees may have been impacted.<\/p>\n<\/div><\/div>\n<hr role=\"separator\" class=\"hr--transparent hr--transparent-15px not-in-view\">\n<h3 style=\"text-align: left;\">Third-party service providers who have contacted NAU about this breach<\/h3>\n<hr role=\"separator\" class=\"hr--transparent hr--transparent-30px not-in-view\">\n<!-- shortcode-accordion -->\n<div class=\"shortcode-accordion shortcode-accordion--closed\" style=\"position: relative;\" >\n        <a class=\"shortcode-accordion__trigger\" data-header=\"Teacher\u2019s Insurance and Annuity Association_0\" href=\"#\">\n      <div class=\"shortcode-accordion__header\">\n          <h4>Teacher\u2019s Insurance and Annuity Association <span class=\"screen-reader-text\">Accordion Closed<\/span><\/h4>\n          <span class=\"shortcode-accordion__header__arrow\"><\/span>\n      <\/div>\n    <\/a>\n    <div class=\"shortcode-accordion__body\">\n        <!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body>\n<p>Teachers Insurance and Annuity Association (TIAA) is a financial organization that offers investment and insurance services to employees working in the academic, research, medical, governmental, and cultural fields. TIAA has indicated that Pension Benefit Information (PBI), LLC, an outside vendor it shares information with, has been impacted.<\/p>\n<p>For additional details about this incident, visit&nbsp;<a href=\"https:\/\/www.pbinfo.com\/faq-communication\/\">PBI&rsquo;s website<\/a>.<\/p>\n<\/body><\/html>\n\n    <\/div>\n<\/div>\n\n<!-- shortcode-accordion -->\n<div class=\"shortcode-accordion shortcode-accordion--closed\" style=\"position: relative;\" >\n        <a class=\"shortcode-accordion__trigger\" data-header=\"National Student Clearinghouse_0\" href=\"#\">\n      <div class=\"shortcode-accordion__header\">\n          <h4>National Student Clearinghouse <span class=\"screen-reader-text\">Accordion Closed<\/span><\/h4>\n          <span class=\"shortcode-accordion__header__arrow\"><\/span>\n      <\/div>\n    <\/a>\n    <div class=\"shortcode-accordion__body\">\n        <!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body>\n<p>The National Student Clearinghouse is a trusted provider to approximately 4,000 higher education institutions across the United States and provides valuable services supporting financial aid and student success. NSC provides educational reporting and research services to many higher education institutions, including NAU.<\/p>\n<p>The National Student Clearinghouse keeps updates on the incident&nbsp;<a href=\"https:\/\/alert.studentclearinghouse.org\/\">on its website<\/a>.<\/p>\n<\/body><\/html>\n\n    <\/div>\n<\/div>\n\n<!-- shortcode-accordion -->\n<div class=\"shortcode-accordion shortcode-accordion--closed\" style=\"position: relative;\" >\n        <a class=\"shortcode-accordion__trigger\" data-header=\"United Healthcare_0\" href=\"#\">\n      <div class=\"shortcode-accordion__header\">\n          <h4>United Healthcare <span class=\"screen-reader-text\">Accordion Closed<\/span><\/h4>\n          <span class=\"shortcode-accordion__header__arrow\"><\/span>\n      <\/div>\n    <\/a>\n    <div class=\"shortcode-accordion__body\">\n        <!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body>\n<p>United Healthcare, a provider of health insurance plans at NAU notified the university that personally identifiable information, as well as claims information, for some of its community members may have been accessed during a MOVEit breach.<\/p>\n<\/body><\/html>\n\n    <\/div>\n<\/div>\n\n<!-- shortcode-accordion -->\n<div class=\"shortcode-accordion shortcode-accordion--closed\" style=\"position: relative;\" >\n        <a class=\"shortcode-accordion__trigger\" data-header=\"The Hartford_0\" href=\"#\">\n      <div class=\"shortcode-accordion__header\">\n          <h4>The Hartford <span class=\"screen-reader-text\">Accordion Closed<\/span><\/h4>\n          <span class=\"shortcode-accordion__header__arrow\"><\/span>\n      <\/div>\n    <\/a>\n    <div class=\"shortcode-accordion__body\">\n        <!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body>\n<p>The Hartford is a provider of supplemental life insurance. The Hartford has indicated that Pension Benefit Information (PBI), LLC, an outside vendor it shares information with, has been impacted.<\/p>\n<p>For additional details about this incident, visit&nbsp;<a href=\"https:\/\/www.pbinfo.com\/faq-communication\/\">PBI&rsquo;s website<\/a>.<\/p>\n<\/body><\/html>\n\n    <\/div>\n<\/div>\n\n<hr role=\"separator\" class=\"hr--transparent hr--transparent-15px not-in-view\">\n<!-- shortcode-block -->\n<div class=\"shortcode-block\">\n      <div class=\"block-header\">\n        <h3>Steps to safeguard your privacy<\/h3>\n    <\/div>\n          <div class=\"block-body\">\n      <div><!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body>\n<ul>\n<li>Always&nbsp;enable two-factor authentication&nbsp;for any online service. This has proven to hinder bad actors who are trying to access your data.<\/li>\n<li>Use&nbsp;strong password practices, and leverage a password manager when possible.<\/li>\n<li>Be vigilant for phishing and other scams. NAU will never send emails asking for your password or login information. Beware of emails that ask for your personal, login, or financial information. Send any suspicious emails to <a href=\"mailto:phishing@nau.edu\">p<strong>hishing@nau.edu<\/strong><\/a>.<\/li>\n<li>If you believe you are the victim of&nbsp;identity theft, file a local police report and notify the Federal Trade Commission at&nbsp;<a href=\"http:\/\/www.identitytheft.gov\"><strong>www.identitytheft.gov<\/strong><\/a>.<\/li>\n<li>For specific questions or concerns, please contact&nbsp;<a href=\"mailto:DataSecurity@nau.edu\"><strong>DataSecurity@nau.edu<\/strong><\/a>.<\/li>\n<\/ul>\n<\/body><\/html>\n<\/div>\n          <\/div>\n  <\/div>\n\n<hr role=\"separator\" class=\"hr--transparent hr--transparent-15px not-in-view\">\n<h3>Moving Forward<\/h3>\n<h5>NAU expects that the TIAA, National Student Clearinghouse, United Healthcare, and The Hartford will contact impacted individuals directly with additional details where required by law.<\/h5>\n<h5>NAU will continue to update this webpage as new information becomes available from the service providers. For specific questions or concerns please contact\u00a0<a href=\"mailto:DataSecurity@nau.edu\">DataSecurity@nau.edu<\/a>.<\/h5>\n","protected":false},"excerpt":{"rendered":"<p>Third-Party Data Breach Notifications May 2023 &#8211; Northern Arizona University Information Technology Services Third-party service providers who have contacted NAU about this breach Moving Forward NAU expects that the TIAA, National Student Clearinghouse, United Healthcare, and The Hartford will contact impacted individuals directly with additional details where required by law. NAU will continue to update [&hellip;]<\/p>\n","protected":false},"author":608,"featured_media":16710,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","ring_central_script_selection":"","footnotes":""},"class_list":["post-16708","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/pages\/16708","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/users\/608"}],"replies":[{"embeddable":true,"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/comments?post=16708"}],"version-history":[{"count":15,"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/pages\/16708\/revisions"}],"predecessor-version":[{"id":16982,"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/pages\/16708\/revisions\/16982"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/media\/16710"}],"wp:attachment":[{"href":"https:\/\/in.nau.edu\/its\/wp-json\/wp\/v2\/media?parent=16708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}