HackingEducationEducationSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Butler University
bd_15379581260d3b93 · schema v1 · pii pii-v1
Full breach record for Butler University →Butler University reported a data breach originating from a third party, affecting 1,871 individuals, including one resident of Maine. The breach, which occurred on January 1, 2020, was discovered on December 4, 2023. The compromised data includes names and Social Security numbers. Butler University began notifying affected individuals on April 11, 2024, and offered one year of credit monitoring services through Experian.
Maine clockDiscovered Dec 4, 2023 → Filed with AG Apr 11, 2024129d ✗ ME AG >90d18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_17407291378201c4Indiana State AGfiled 2024-04-11Verified
- bd_37489d61a71a5c3dMontana State AGfiled 2024-04-11Verified
- bd_6d9acc4e198e5042New Hampshire State AGfiled 2024-04-11Verified
- bd_8bfeb28f46a087f5Vermont State AGfiled 2024-04-11Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aebbc4f8-fbd7-4a2d-991b-f1ec97032e39.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2024
- Raw hash
- 2e07ad5aeacfaeeb05dd6cf1e07237e152d28bdbb49f39170f31193995878e8b
Reporting entity
- Name
- Butler Universitynorm: butler university
- Domain
- butler.edu
Victim entity
- Name
- Butler Universitynorm: butler university
- Domain
- butler.edu
- Industry
- Educationllm
Incident
- Discovered
- Dec 4, 2023
- Materiality determined
- —
- Notification sent
- Apr 11, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 18 weeks(129 days from discovery to filing)
- Compliance flags
- ME AG >90d · 129dME resident >60d · 129d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 4, 2023→ Filed with AG: Apr 11, 2024129d 90 days ME AG >90d Maine Discovered: Dec 4, 2023→ Notified: Apr 11, 2024129d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.