A cyber attack on third-party service, Atlassian, has potentially exposed personal details of 30,000 current and former students of the University of Colorado Boulder. A vulnerability on Atlassian, the resource sharing software program used by the institution’s Office of IT, was taken advantage of by threat actors when the university’s department was preparing to implement a new version of the software.
The results of the attack showed stored files in the program being illegally accessed, potentially exposing PII including names, student ID numbers, addresses, dates of birth, phone numbers, and genders. The university stated that those affected will be notified via email and will be offered free credit monitoring services.