FOLLOW-UPmail
Approximate reconstruction617 chars
Dear [Name], We are writing to notify you of a data security incident that may have involved your personal information. On or about December 15-17, 2024, we discovered unauthorized access to certain Oral Roberts University systems, during which data was taken. Our investigation determined that the following information was accessed: your name and Social Security number. We immediately took steps to secure our systems and launched a thorough investigation. We are providing you with 24 months of complimentary credit monitoring through Experian IdentityWorks. We sincerely apologize for any concern this may cause.
This text has been reconstructed from news coverage and may not reflect the exact original wording.
Notification was sent by mail rather than electronically, a standard practice for data breach notifications under state breach notification laws; the two-month gap between discovery and notification was at the longer end of typical timelines.
The breach was classified as a 'data security incident' rather than ransomware; ORU confirmed data was 'taken' over a three-day window, consistent with a data exfiltration attack.