HackingEducationEducationStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Virginia Union University

bd_8d7a0194509940d2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 13, 2023

Filed

May 1, 2024

To disclose

15 months

Affected

8state residents only

Linked

8 records

Confidence

65%

Full breach record for Virginia Union University →3 incidents on file

Virginia Union University notified Montana residents of a security incident detected on Feb 13, 2023. Unauthorized access to the network resulted in the acquisition of full names. VUU engaged external forensic investigators, contained the threat, and offered 12 months of complimentary identity defense services to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d15 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 15 months / 443 days

Feb 13, 2023

Discovered

May 1, 2024

Filed

This filing is one of 8 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 435 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_25927e13677b544f2023-02-21 · +434dVerified by operator

Regulatory filings (6) · sorted by filing gap

California State AGbd_1dd9c37ba2a258a32024-05-01Candidate
Massachusetts State AGbd_720bb632b418dd902024-05-01Verified
Illinois State AGbd_826d37e056a9d70d2024-05-01Verified
Indiana State AGbd_a59099b99e36561c2024-05-01Verified by operator

Show 2 more filings ↓up to 5d gap

Delaware State AGbd_b8c00e40674155fa2024-05-01Verified by operator
New Hampshire State AGbd_96b9f5e12ee477172024-05-06 · +5dVerified by operator

Name: Virginia Union University
norm: virginia union university
Domain: vuu.edu

Name: Virginia Union University
norm: virginia union university
Domain: vuu.edu
Industry: Educationllm

Discovered: Feb 13, 2023
Materiality determined: —
Notification sent: Apr 1, 2024
Affected individuals: 8state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Contained the threat
Commenced a prompt and thorough investigation with external cybersecurity professionals
Offering a complimentary 12-month membership of CyEx Identity Defense
Changes made: Continually evaluate and modify practices to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(443 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGMay 1 · first

Massachusetts State AGMay 1 · first

Illinois State AGMay 1 · first

Indiana State AGMay 1 · first

Delaware State AGMay 1 · first

Montana State AGMay 1 · first · this page

New Hampshire State AG+5d

Pattern: first filing May 1 (CA), last May 6 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1330.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 1, 2024
Raw hash: 875c05bcf48c27b51e8bad6b207601e81486dd20361c2a778eb0159c86060477

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityVirginia Union University

Victim entityVirginia Union University

Incidentdiscovered Feb 13, 2023

Stated responseContained the threat

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov