Investigation by the Denver Gazette revealed that the Colorado Department of Higher Education failed to report a widespread ransomware-related data breach to the state attorney general's office within a month of discovering the incident, which is in violation of the state's breach notification law, according to StateScoop.
Article Link: Disclosure of massive Colorado higher education department breach deferred | SC Media