Cybersecurity incident — 2023-07-24 00:00:00
Affected organization: Michigan State University
Affected country: United States of America
Industry: Educational Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: cl0p
Actor type: Criminal
Actor country: Russian Federation

Michigan State University (MSU) posts a notice on its website describing a third-party data breach that occurred at two vendors used by the University: the Teachers Insurance and Annuity Association (TIAA) and the National Student Clearinghouse ("NSC") both data breaches were related to the file transfer program MOVEit, resulting in the potential exposure of student and retiree data.