HackingStolen CredentialsData ExfiltratedIDENTITY_BASICLowContained
SAINT XAVIER UNIVERSITY
bd_08673f526f077e6d · schema v1 · pii pii-v1
Full breach record for SAINT XAVIER UNIVERSITY →Saint Xavier University notified consumers of unauthorized access to systems between June 29 and July 18, 2023. An actor downloaded files containing names and other data elements. The university notified law enforcement, enhanced security measures, and offered credit monitoring. Notification was sent in October 2024.
Vermont clock✗ VT AG >45 bday16 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by alphv about this victim predates this filing by 435 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-23-saint-xavier-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2024
- Raw hash
- cac3571e4ff1fd1c8c9703caa3df20dc0690c685b6ea81842a8916c3d3556588
Reporting entity
- Name
- SAINT XAVIER UNIVERSITYnorm: saint xavier university
- Domain
- sxu.edu
Victim entity
- Name
- SAINT XAVIER UNIVERSITYnorm: saint xavier university
- Domain
- sxu.edu
Incident
- Discovered
- Jul 1, 2023
- Materiality determined
- —
- Notification sent
- Oct 30, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- provided relevant updates to the SXU community as we worked to respond to this matterproviding notice of this incident to potentially impacted individuals and to relevant regulatory authorities
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(480 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.