University System of Georgia: 800K exposed in 2023 MOVEit attack

The University System of Georgia notified approximately 800,000 people that sensitive information was stolen after the Clop ransomware group exploited a zero‑day vulnerability in Progress MOVEit in May 2023; exposed data includes Social Security numbers (full or last four digits), dates of birth, bank account numbers, federal tax documents with Tax ID numbers, and potentially driver’s license/ID numbers. USG worked with the FBI and CISA to confirm the breach, sent notices in April 2024, and is offering 12 months of Experian identity protection; the incident is part of the broad MOVEit campaign that has impacted thousands of organizations and millions of individuals.