Account Data Breach: Dave

In June 2020,  Dave, a digital banking app, suffered a data breach. 7.5 million rows of data were leaked to the public on a hacking forum. The breach exposed individuals’ Personal Identifiable Information (PII) such as names, dates of birth, encrypted social security numbers and passwords.

UMBC’s Division of Information Technology (DoIT) has been notified that over 20 UMBC accounts might have been affected by this breach. 

The individuals who have been affected by the data breach were notified via their UMBC email and/or their alternate emails. If you do not have an alternate email listed on your UMBC account, we suggest that you create one, preferably different from your UMBC email account. 

To link an alternate email account to your UMBC account follow the instructions below:

1. Login to your myUMBC account: http://my.umbc.edu/account

2. Go to https://webadmin.umbc.edu/admin//Security/Setup/View

3. Click Account security setup

4. At the top of the page, enter your alternate email address

5. Scroll down to the bottom of the page and click Update my security settings

If you have a Dave account we suggest that you contact them to see if your information has been leaked. 

The data about Dave was provided to the breach notification service Have I Been Pwned (HIBP) by dehashed.com.

For more information on Dave data breach visit:

https://www.zdnet.com/article/tech-unicorn-dave-admits-to-security-breach-impacting-7-5-million-users/

https://www.tomsguide.com/news/dave-data-breach 

If you have any questions or concerns email us: security@umbc.edu 

_________________________________________________________________________

Receive any suspicious emails?