Colorado Department of Higher Education Reveals Data Incident Affects Students As Far Back As 2004

Category: Data Breach | Industry: Education | Source: CDHE - News Release

A data incident notice has been issued by the Colorado Department of Higher Education (“CDHE”), revealing a network intrusion between June 11th and June 19th, 2023, resulting in a ransomware attack. The CDHE has engaged third-party specialists to assist in the ongoing investigation. Although their review is not yet complete, the institution unveiled a significant scope of impact cautioning "those that attended a public institution of higher education in Colorado between 2007-2020, attended a Colorado public high school between 2004-2020, individuals with a Colorado K-12 public school educator license between 2010-2014, participated in the Dependent Tuition Assistance Program from 2009-2013, participated in Colorado Department of Education’s Adult Education Initiatives programs between 2013-2017, or obtained a GED between 2007-2011 may be impacted by this incident."

The CDHE also warns the compromised data for the affected individuals includes full names, social security numbers, student identification numbers, and education records. CDHE will distribute notices to impacted students once the investigation concludes, and those affected will receive two years of credit monitoring through Experian.