This notice is to inform you about an incident that involved unauthorized access to personal information maintained by the University of Michigan.
What Happened. On August 23, 2023, the University detected suspicious activity on the University of Michigan campus computer network. We took quick and decisive action to contain the incident, including proactively disconnecting the campus network from the internet. We quickly launched an investigation with the support of leading third-party experts. Based on our investigation, we have determined that an unauthorized third party was able to access certain University systems from August 23, 2023 to August 27, 2023.
What Information Was Involved. The University used a dedicated review team to conduct a detailed analysis of the files included on the systems accessed by the unauthorized actor. Based on this data analysis, we believe that the unauthorized third party was able to access personal information relating to certain students and applicants, alumni and donors, employees and contractors, University Health Service and School of Dentistry patients, and research study participants. The following provides examples of the types of information, in addition to an individual’s name, that may have been accessed, depending on an individual’s affiliation with the University.
Students, applicants, alumni, donors, employees, and contractors: Social Security number, driver’s license or other government-issued ID number, financial account or payment card number, and/or health information.
