University of Connecticut

Organization

University of Connecticut

Source

California AG · source record

Date reported

Jun 14, 2016

Date(s) of breach

Saturday, September 24, 2016

Residents affected

Not published by this source

Data exposed

Social Security number Financial / bank account Medical / health information Health insurance Email address Tax ID / EIN / ITIN Phone number Postal address Name

Notice letter

Sample notice (PDF)

Discovered

Mar 9, 2015, as stated in the letter

"On March 9, 2015, Information Technology (IT) staff in the School of Engineering detected that malicious software, or “malware,” had been placed on a number of servers that are part of the School’s technical infrastructure over a period ..."

Days to notice

463 days from discovery (Mar 9, 2015) to the California record (Jun 14, 2016). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

12 months of credit or identity monitoring through Experian

First seen by BreachTally

2026-10-30 16:19 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.