HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICLowContained
Butler University
bd_8bfeb28f46a087f5 · schema v1 · pii pii-v1
Full breach record for Butler University →Butler University notified consumers that its third-party vendor, Athletic Trainer System (ATS), was compromised in August 2020. The incident potentially exposed names of student-athletes. Butler University contacted law enforcement and is offering complimentary credit monitoring via Experian. The investigation is ongoing but access has been cut.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_15379581260d3b93Maine State AGfiled 2024-04-11Candidate
- bd_17407291378201c4Indiana State AGfiled 2024-04-11Verified
- bd_37489d61a71a5c3dMontana State AGfiled 2024-04-11Verified
- bd_6d9acc4e198e5042New Hampshire State AGfiled 2024-04-11Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-11-butler-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2024
- Raw hash
- 958f2280738ac6e6e5de623c20f234b0aee21bfb6b320bbe697eb76d03b797ce
Reporting entity
- Name
- Butler Universitynorm: butler university
- Domain
- butler.edu
Victim entity
- Name
- Butler Universitynorm: butler university
- Domain
- butler.edu
Incident
- Discovered
- Nov 28, 2023
- Materiality determined
- —
- Notification sent
- Apr 10, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Athletic Trainer System
- Initial access
- supply_chain
Compliance
- Time to disclose
- 19 weeks(135 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.