One year on, universities org admits MOVEit attack hit data of 800K people

The University System of Georgia confirmed that a May 31, 2023 compromise of its MOVEit Transfer instance—attributed to the Cl0p gang exploiting a now-patched MOVEit vulnerability—exposed personal data for approximately 800,000 people (including SSNs, DOBs, bank and tax records). The disclosure describes notification activity beginning April 15, remediation steps taken (blocking and patching MOVEit), and situates the incident within a widespread MOVEit exploitation campaign that has impacted thousands of organizations and tens of millions of records.