HackingSupply Chain (3P Vendor)Customer Data InvolvedPIIFINANCIAL_ACCOUNTIDENTITY_BASICLowContained

tulane.edu

bd_3fd1f265df02752d · schema v1 · pii pii-v1

Tulane University notified the New Hampshire Attorney General of a data security incident involving unauthorized acquisition of data from an archived website for The Stone Center for Latin American Studies, hosted by a former third-party vendor. The incident involved PII and expired payment card information. One New Hampshire resident was notified. The website was taken offline and law enforcement was notified.

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

A leak claim by meow about this victim predates this filing by 175 days.View originating leak claim

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tulane-university-20240605.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 5, 2024
Raw hash: 78928f6572dbdf88b43470e61b381b07bfbfe84ad1913810b0d34f3596860ad1

Reporting entity

Name: tulane.edu
norm: tulaneedu
Domain: tulane.edu

Victim entity

Name: tulane.edu
norm: tulaneedu
Domain: tulane.edu

Incident

Discovered: —
Materiality determined: Apr 10, 2024
Notification sent: Jun 5, 2024
Affected individuals: 1
Data types: PIIFINANCIAL_ACCOUNTIDENTITY_BASIC
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: supply_chain

Compliance

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.