HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
BRIGHAM YOUNG UNIVERSITY
bd_2a902e62ad70d30f · schema v1 · pii pii-v1
Full breach record for BRIGHAM YOUNG UNIVERSITY →Brigham Young University notified consumers of unauthorized access to files containing names and Social Security Numbers between April 25-27, 2025. The incident was detected in late April, with specific files identified on July 1. BYU secured systems, investigated, and offered one year of Experian IdentityWorks credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday13 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_950fa6a7761f5120Maine State AGfiled 2025-07-23Candidate
- bd_b89be5014c9ebea1Indiana State AGfiled 2025-07-23Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-23-brigham-young-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 23, 2025
- Raw hash
- 245aa4d70f9156296d168abe3b19ed0ec5823804767e4fa5ce6f95a5a04dc7d2
Reporting entity
- Name
- BRIGHAM YOUNG UNIVERSITYnorm: brigham young university
- Domain
- byu.edu
Victim entity
- Name
- BRIGHAM YOUNG UNIVERSITYnorm: brigham young university
- Domain
- byu.edu
Incident
- Discovered
- Apr 25, 2025
- Materiality determined
- Jul 23, 2025
- Notification sent
- Jul 23, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(89 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.