PORT ANGELES — Two vendors have notified Peninsula College of a cybersecurity incident that may have exposed personally identifiable information of current students as well as employees.
At issue is the popular filesharing application MOVEit Transfer used by hundreds of businesses and organizations worldwide. PC does not use the MOVEit software, though two of the college’s vendors do and have contacted the college about the potential exposure of personally identifiable information.
The college has set up a website with more information on the incident, which will update as more details become available. The website is at https://pencol.edu/third-party-cybersecurity -incident-impacts-pc-community-members.
The two vendors that have contacted Peninsula College are the National Student Clearinghouse (NSC) and the Teachers Insurance and Annuity Association (TIAA).
Peninsula College contracts with NSC on such endeavors as enrollment and degree verification services as well as student loan reporting requirements. NSC is a nonprofit organization that provides educational reporting, data exchange and verification services to more than 3,600 colleges and universities nationwide. Personally identifiable information and student education records are provided to NSC as part of this work. Additional details about the incident are available on NSC’s website.
TIAA offers financial services to employees across the country working in academic, research, medical, government and cultural fields. Peninsula College provides TIAA with personally identifiable information of employees who use TIAA’s services. Data transferred from the college to TIAA was not compromised as part of the incident, though the organization has indicated that Pension Benefit Information, LLC, one of its vendors, has been impacted.
For more information contact TIAA’s National Contact Center 1-800-842-2252.
College officials expect NSC and Pension Benefit Information, LLC, will contact impacted individuals directly, as required by law. The timeline of that notification is unknown.
