DisclosureLens
HackingEducationEducationData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Virginia Union University

bd_1dd9c37ba2a258a3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2023

Filed

May 1, 2024

To disclose

15 months

Affected

Not disclosed

Linked

8 records

Confidence

65%
Full breach record for Virginia Union University →3 incidents on file

Virginia Union University detected unauthorized access to its network on February 13, 2023. The threat was contained, and an investigation with external cybersecurity professionals was launched. On April 1, 2024, the university determined that personal information, including full names and Social Security numbers, had been accessed and acquired. The university is offering 12 months of complimentary identity defense services to affected individuals.

Leak gap clock✗ Leak >180d15 months discovery → filing

Incident timeline

discovery → filing · 15 months / 443 days

Feb 13, 2023

Begins

Feb 13, 2023

Discovered

May 1, 2024

Filed

This filing is one of 8 records about the same incident.View merged incident
A leak claim by lockbit_3 about this victim was first seen 435 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Show 2 more filings ↓up to 5d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Illinois State AGMay 1 · first
Montana State AGMay 1 · first
Indiana State AGMay 1 · first
Delaware State AGMay 1 · first
California State AGMay 1 · first · this page

Pattern: first filing May 1 (MA), last May 6 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.