HackingEducationEducationStolen CredentialsTargetedPIIIdentity (basic)LowContained

Johnson & Wales University

bd_3d501478fa8a2c89 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 11, 2024

Filed

Sep 19, 2024

To disclose

10 weeks

Affected

12state residents only

Linked

6 filings

Confidence

66%

Full breach record for Johnson & Wales University →

Johnson & Wales University notified Montana residents of a security incident discovered on July 11, 2024, involving unauthorized network activity. Personal information, including names and other data elements, may have been accessed. JWU engaged forensic specialists, notified the FBI, and is offering complimentary identity monitoring through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 70 days

Jul 11, 2024

Discovered

Sep 19, 2024

Filed

vs. sector median

+1 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_1ee9a4b8bff93a072024-09-19Verified
Massachusetts State AGbd_650f7a30eb6f74db2024-09-19Verified
Maine State AGbd_69a06102553e497b2024-09-19Verified
Vermont State AGbd_808aca33228f5a052024-09-19Verified

Show 1 more filing ↓

Indiana State AGbd_c97f4023e6eb029c2024-09-19Verified

Name: Johnson & Wales University
norm: johnson wales university
Domain: jwu.edu

Name: Johnson & Wales University
norm: johnson wales university
Domain: jwu.edu
Industry: Educationllm

Discovered: Jul 11, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 12state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Took immediate steps to secure its systems
Launched an investigation
Engaged digital forensics and incident response specialists
Notified the Federal Bureau of Investigation
Offering you complimentary identity monitoring services through Kroll
Changes made: Working to implement measures to enhance the security of its digital environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(70 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

New Hampshire State AGSep 19 · first

Massachusetts State AGSep 19 · first

Maine State AGSep 19 · first

Vermont State AGSep 19 · first

Indiana State AGSep 19 · first

Montana State AGSep 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1694.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: 05d1e3b6f43071e3a4990d619a11ba136879c95ca3d6fe02a368908243345dca

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityJohnson & Wales University

Victim entityJohnson & Wales University

Incidentdiscovered Jul 11, 2024

Stated responseTook immediate steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov