HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Nazareth University
bd_1b55904a68335869 · schema v1 · pii pii-v1
Full breach record for Nazareth University →Nazareth University notified consumers of a cybersecurity incident discovered March 12, 2025, involving unauthorized access to personal information including SSNs, names, addresses, and employment data. The incident likely occurred in September 2024. The university engaged forensic investigators and is offering 12 months of Experian IdentityWorks.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_602281cf9d78c0c1Maine State AGfiled 2025-05-12Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-12-nazareth-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2025
- Raw hash
- 71cd295083d5c851e8c7d14c43a2124da21cd430db43af10cc410de438e65f1d
Reporting entity
- Name
- Nazareth Universitynorm: nazareth university
Victim entity
- Name
- Nazareth Universitynorm: nazareth university
Incident
- Discovered
- Mar 12, 2025
- Materiality determined
- —
- Notification sent
- May 8, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.