STANFORD UNIVERSITY

Organization

STANFORD UNIVERSITY

Source

California AG · source record

Date reported

Dec 22, 2017

Date(s) of breach

n/a

Residents affected

Not published by this source

Data exposed

Social Security number Passport number Health insurance Name

Notice letter

Sample notice (PDF)

Discovered

Feb 23, 2017, as stated in the letter

"The GSB IT team became aware of the incorrect folder permissions on February 23, 2017, however, because GSB did not appreciate the scope of the exposure there was a delay in informing the UPO."

Days to notice

302 days from discovery (Feb 23, 2017) to the California record (Dec 22, 2017). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

credit or identity monitoring through Experian

Third party

The letter attributes the incident to a vendor or service provider

First seen by BreachTally

2026-10-30 16:15 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.