The University of California has learned that it, along with other universities, government agencies and private companies throughout the country, was recently subject to a cybersecurity attack. The attack involves the use of Accellion, a vendor used by many organizations for secure file transfer. An unauthorized party appears to have copied and transferred UC files by exploiting a vulnerability in Accellion’s file transfer service.
UC Office of the President is investigating the data breach with support from law enforcement and cybersecurity experts. At this time, we believe this attack affected only the Accellion system and did not compromise other UC systems or networks.