[News](/news) 310,000 Colorado University records compromised [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # 310,000 Colorado University records compromised ##### [Edward Kost](/team/edward-kost) April 11, 2021 The University of Colorado has been breached through its former third-party vendor Accellion. Accellion fell victim to a supply chain attack on December 23, 2020. Cybercriminals penetrated Accelion’s extensive client network and then began systematically breaching their data. To date, at least 2.7 million victims have been impacted through Accellion’s compromise, a testament to the [pernicious efficiency of supply chain attacks](https://www.upguard.com/blog/supply-chain-attack). CU began investigating the incident in February 2021. It was recently revealed that the breach was the most devastating cyberattack in the University’s history. More than 310,000 university records were compromised including: * Transcript information  * Grades * Medical information * Prescription information * Student ID numbers * Disability status’ * Social security numbers * University financial account information A majority of the breached data is linked to the Boulder campus. After the incident, both CU staff and students were contacted by [ransomware group CL0P](https://www.upguard.com/news/symrise-clop-attack) who demanded payment to prevent the private data from being published online. CU responded with a social post warning all recipients to not comply with the cybercriminal’s demands. > Many campus constituents are receiving extortion emails connected to the Accellion cyberattack. If you receive one of these emails, please do not reply or engage with the senders and delete the email. [pic.twitter.com/DzXYjBzZPl](https://t.co/DzXYjBzZPl) > > — CU Boulder OIT (@CUBoulderOIT) [April 9, 2021](https://twitter.com/CUBoulderOIT/status/1380559707388014597?ref_src=twsrc%5Etfw) After the ransom payment ultimatum had elapsed, in classic [double-extorsion ransomware fashion](https://www.upguard.com/blog/what-is-ransomware-as-a-service), the seized data was published on the criminal-infested dark web. ‍ CL0P’s role in the original Accellion breach is still uncertain. They could either be responsible for the attack or just managing the stolen data. Colorado University is offering impacted students credit monitoring, identify monitoring, fraud consultation, and identity theft restoration free of charge. ## How secure is Colorado University? Colorado University operates as a public research institution offering undergraduate and graduate degree programs across arts, sciences, business, and technology. The university conducts research in areas including water systems, medical treatments, planetary defense, and quantum technology. * View our free preliminary report on Colorado University’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Colorado University's score](/security-report/colorado-university) [View score](/security-report/colorado-university) [https://www.colorado.edu/](/security-report/colorado-university) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)