HackingData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Albany College of Pharmacy
bd_1340b023dbebb48d · schema v1 · pii pii-v1
Full breach record for Albany College of Pharmacy →Albany College of Pharmacy and Health Sciences (ACPHS) disclosed a cybersecurity incident detected on September 14, 2024. Unauthorized access occurred between August 31 and September 14, 2024. Impacted data included names and government IDs (SSNs). ACPHS engaged external forensic investigators and offered credit monitoring services. The incident is currently contained.
Vermont clock✗ VT AG >45 bday39 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 275 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_28622432ff3e3c9fLeak Sitemedusafiled 2024-10-07(252d gap)Verified by operator
- bd_3fa5bcf38afe8cfbLeak Sitemedusafiled 2024-09-14(275d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_c2257fdbf5a4d68fWashington State AGfiled 2025-06-16Verified by operator
- bd_e539f790dec34bc9Maine State AGfiled 2025-06-16Verified
- bd_8bd925ccdd1b9c08Texas State AGfiled 2025-06-17(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-16-albany-college-pharmacy-and-health-sciences-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 16, 2025
- Raw hash
- 910a5640ec3a2118ce6d0acecb757b699d6925d3443c4129ad6b856136164c11
Reporting entity
- Name
- Albany College of Pharmacynorm: albany college of pharmacy
- Domain
- acphs.edu
Victim entity
- Name
- Albany College of Pharmacynorm: albany college of pharmacy
- Domain
- acphs.edu
Incident
- Discovered
- Sep 14, 2024
- Materiality determined
- Jun 16, 2025
- Notification sent
- Jun 16, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 39 weeks(275 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.