HackingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Xavier University
bd_56fdc9762a54064f · schema v1 · pii pii-v1
Full breach record for Xavier University →Xavier University of Louisiana notified the NH Attorney General of a data security incident occurring on November 22, 2022. Unauthorized access to student and vendor personal information, including names and SSNs, was determined on January 24, 2023. 9 NH residents were affected. The FBI was notified, and credit monitoring services were offered.
Leak gap clock⏱ Leak >30d12 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by vicesociety about this victim predates this filing by 57 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_e31783d295b6a1d4Leak Sitevicesocietyfiled 2022-12-20(57d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_1f309206d3ca6664Montana State AGfiled 2023-02-14(1d gap)Verified by operator
- bd_a85e08945f629531California State AGfiled 2023-02-12(3d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/xavier-university-20230215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 15, 2023
- Raw hash
- 3177f4df6ad24342f3fbc48b993ba46a98e44929bf332e2e10135974a50cda52
Reporting entity
- Name
- Xavier Universitynorm: xavier university
- Domain
- xavier.edu
Victim entity
- Name
- Xavier Universitynorm: xavier university
- Domain
- xavier.edu
Incident
- Discovered
- Nov 22, 2022
- Materiality determined
- Jan 24, 2023
- Notification sent
- Feb 2, 2023
- Affected individuals
- 9
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(85 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.