Lansing Community College

Third-Party Vendors Victim of Data Breach

LCC has recently been made aware of data security incidents involving some of its third-party vendors that were impacted by the MOVEit file transfer software vulnerability. LCC does not use the MOVEit software, and its own systems weren't part of this security incident.

The following vendors have contacted LCC to advise that information for some LCC employees and students may have been involved in data security incidents relating to this vulnerability: TIAA (Teachers Insurance and Annuity Association of America), the Hartford, and National Student Clearinghouse (NSC). TIAA is a financial provider for educators and academics. LCC uses Hartford to provide insurance services. The NSC is a national nonprofit that collects enrollment and other student data from many colleges and universities, and LCC uses NSC for student financial aid compliance purposes. TIAA and the Hartford both use vendor PBI Research Services, which used the MOVEit Transfer software that was exploited as part of this incident. It is our understanding that each of these vendors have contacted law enforcement, initiated an investigation, patched the vulnerabilities, and secured their networks. They are now operational again, are investigating the security incidents, and plan to provide updates when they are available.

LCC will continue working with its third-party vendors to learn more about the potential exposure of personal data, and more specifically to identify who within the LCC community was impacted and what information was involved. It is our understanding that these vendors are sending affected individuals a letter by mail in the coming weeks with additional information.

LCC will continue to monitor this situation and will provide updates as more information becomes available.

If you have any questions or need further information, please contact the LCC Help Desk at 517-483-5221 or via e-mail at lcc1@lcc.edu.

 

About Lansing Community College

Lansing Community College is an equal-opportunity educational institution/employer. Lansing Community College programs and activities are open to all persons regardless of race, color, sex, age, religion, national origin, creed, ancestry, height, weight, sexual orientation, gender identity, gender expression, disability, familial status, marital status, military status, veteran’s status, or other status as protected by law, or genetic information.

 

Plan Your Next Move