Three U.S. universities have disclosed data breach incidents impacting personally identifiable information of students or employees following unauthorized access to some of their employees’ email accounts. Graceland University, Oregon State University, and Missouri Southern State University have notified the individuals whose personal information was potentially stolen or accessed about the security incidents. No evidence has been found of the impacted personal information being stolen or used in a malicious manner while investigating the disclosed data privacy incidents involving all three universities. The information that could have been accessed during the incident contained: full name, dates of birth, social security number, home addresses, email addresses, telephone numbers, and social security numbers.
Source: https://www.bleepingcomputer.com/news/security/three-us-universities-disclose-data-breaches-over-two-day-span/