HackingTargetedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Baker University
bd_35a5b9522401ddd2 · schema v1 · pii pii-v1
Full breach record for Baker University →Baker University notified consumers of a data breach involving unauthorized access to its network between December 2 and December 19, 2024. The incident resulted in the exposure of names and government identifiers (variable data). The university reported the incident to law enforcement and regulators, implemented additional security measures, and offered 12 months of credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_6a912b41ca6d3961California State AGfiled 2025-12-19Candidate
- bd_8ed2567ff6c359b9Montana State AGfiled 2025-12-19Verified
- bd_9187c6f3e3606aa1New Hampshire State AGfiled 2025-12-19Verified
- bd_c42c7af0c430e70aIndiana State AGfiled 2025-12-19Verified
Show 2 more filings ↓Show fewer ↑up to 3d gap
- bd_e32585bcd1cf0b0dMaine State AGfiled 2025-12-19Verified by operator
- bd_76171ef4f6cacb87Texas State AGfiled 2025-12-22(3d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-19-baker-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2025
- Raw hash
- 0a6c65e971f3df6d09fa7c3a6e021f7c1fb6df8addf1473ef06c929766230bf1
Reporting entity
- Name
- Baker Distributingnorm: baker distributing
- Domain
- bakerdist.com
Victim entity
- Name
- Baker Universitynorm: baker university
Incident
- Discovered
- Dec 1, 2024
- Materiality determined
- —
- Notification sent
- Dec 19, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported this incident to law enforcement and regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(383 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.