Investigation by the Denver Gazette revealed that the Colorado Department of Higher Education failed to report a widespread ransomware-related data breach to the state attorney general’s office within a month of discovering the incident, which is in violation of the state’s breach notification law, according to StateScoop. CDHE had its systems known to be impacted by a ransomware attack on June 14 but several state college officials only became aware of the incident on July 28, when the intrusion was accidentally mentioned during a meeting, while both the Colorado Attorney General and the public were informed regarding the incident in early August, according to the Denver Gazette.

Source: SC Magazine