HackingStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
WORCESTER POLYTECHNIC INSTITUTE
bd_777c79b59ffc3595 · schema v1 · pii pii-v1
Full breach record for WORCESTER POLYTECHNIC INSTITUTE →Worcester Polytechnic Institute (WPI) notified consumers of a data breach discovered on September 18, 2024. A WPI student inadvertently accessed a software application share containing other students' names and Social Security numbers. WPI applied access restrictions, engaged third-party forensic specialists, and is offering complimentary credit monitoring. No criminal activity is suspected.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1b0b67d59c1c7e34Montana State AGfiled 2024-11-05Candidate
- bd_5f93ce13f87be59aIndiana State AGfiled 2024-11-05Verified
- bd_98eca8cd1736063dNew Hampshire State AGfiled 2024-11-05Verified
- bd_dd31a6bcb35db7c0Maine State AGfiled 2024-11-05Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-11-05-worcester-polytechnic-institute-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 5, 2024
- Raw hash
- 35e37b2f3da3d228c6adc93509427d15f52f9290322fab9d1b7e68e9a1a3812c
Reporting entity
- Name
- WORCESTER POLYTECHNIC INSTITUTEnorm: worcester polytechnic institute
Victim entity
- Name
- WORCESTER POLYTECHNIC INSTITUTEnorm: worcester polytechnic institute
Incident
- Discovered
- Sep 18, 2024
- Materiality determined
- —
- Notification sent
- Nov 5, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Will notify applicable regulatory authorities, where necessary
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.