Data Security Breach

April 2, 2021

Dear Colleagues,

This week, the University of Maryland, Baltimore (UMB) Center for Information Technology Services (CITS) became aware that data was stolen from our Accellion secure file transfer system in December 2020. The evidence we have indicates that a very limited number of individuals had their personally identifiable information exposed by the cyber criminals on an illegal website.

Our first priority is to protect the data of our employees and students. Upon learning of this attack, we identified and notified the individuals known to be affected by this criminal activity and are providing them with free credit monitoring and identity restoration services. All appropriate federal and state authorities have been contacted, and CITS will assist them in their investigations in any way we can. We also continue to rigorously monitor for any signs that additional individuals were affected.

It is important to note that every appropriate security measure was taken prior to this attack, including rigorous monitoring and the installation of all patches and software upgrades provided by Accellion. At the end of January 2021, even before learning that data was stolen in December, CITS executed an existing plan to replace the existing appliance with another secure file transfer solution.

UMB is not alone in this attack. Over 300 other Accellion customers have been impacted, including Fortune 500 companies, compliance and security firms, and higher education institutions such as Stanford University, the University of Miami (Fla.), the University of Colorado, and Harvard Business School.

Being in such company is not a source of comfort, but it is a reminder to us that even with all of the security protections in place, this type of criminal activity can occur. We must and we will remain vigilant in our efforts to ensure the security of the critical and private information of our community and those we serve.

Sincerely,

Peter J. Murray, PhD
Chief Information Officer and Vice President

For general information about security breaches and steps you can take to protect your identity, call 410-576-6550 or visit the website of the Maryland Office of the Attorney General at https://www.marylandattorneygeneral.gov/Pages/IdentityTheft/databreech.aspx

To Contact Major Consumer Credit Bureau Agencies:
Equifax. Equifax.com/personal/credit-report-services. 800-685-1111.
Experian. Experian.com/help. 888-EXPERIAN (888-397-3742)
Transunion. TransUnion.com/credit-help. 888-909-8872.

The FTC has a toll-free number, 1-877-IDTHEFT ( 877-438-4338) where consumers who have been victims of identity theft can report the crime and get advice from telephone counselors trained to provide assistance to ID theft victims.