HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICLowContained
Butler University
bd_6d9acc4e198e5042 · schema v1 · pii pii-v1
Full breach record for Butler University →Butler University notified New Hampshire residents of a data breach involving its third-party vendor, Athletic Trainer System (ATS). An unknown actor accessed ATS systems in August 2020, potentially exposing student-athlete personal information (names). Butler notified law enforcement in November 2023 and sent notices to NH residents in April 2024, offering credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_15379581260d3b93Maine State AGfiled 2024-04-11Candidate
- bd_17407291378201c4Indiana State AGfiled 2024-04-11Verified
- bd_37489d61a71a5c3dMontana State AGfiled 2024-04-11Verified
- bd_8bfeb28f46a087f5Vermont State AGfiled 2024-04-11Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/butler-university-20240411.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2024
- Raw hash
- bdb392bcf5968b380cde276db2964bcd05d83b3cc48d23ab5e1611ee9131e772
Reporting entity
- Name
- Butler Universitynorm: butler university
- Domain
- butler.edu
Victim entity
- Name
- Butler Universitynorm: butler university
- Domain
- butler.edu
Incident
- Discovered
- Nov 28, 2023
- Materiality determined
- —
- Notification sent
- Apr 11, 2024
- Affected individuals
- 7
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified law enforcementProvided written notice to relevant state and federal regulators
- Third party
- via Athletic Trainer System
- Initial access
- supply_chain
Compliance
- Time to disclose
- 19 weeks(135 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.