HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHICREDENTIALSAUTHENTICATIONBIOMETRICPIICriticalContained
Apprenticeships, Associate Degrees, Career Training
bd_8f3cb49e2c503973 · schema v1 · pii pii-v1
Full breach record for Apprenticeships, Associate Degrees, Career Training →East Valley Institute of Technology (EVIT) disclosed a cyber-incident on January 9, 2024, involving unauthorized network access affecting 208,717 individuals. Compromised data included student and staff PII, SSNs, driver's licenses, financial aid info, medical records, and credentials. EVIT engaged forensic investigators, secured systems, and offered 12 months of identity protection services.
Vermont clock✗ VT AG >45 bday31 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 206 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e5fd89e4efa02ce9Indiana State AGfiled 2024-08-13Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-13-east-valley-institute-technology-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 13, 2024
- Raw hash
- 8066814ab05790e9143cce9df222bfa1677698ca4a6c9546860180a762d8d2fc
Reporting entity
- Name
- Apprenticeships, Associate Degrees, Career Trainingnorm: apprenticeships associate degrees career training
- Domain
- evit.edu
Victim entity
- Name
- Apprenticeships, Associate Degrees, Career Trainingnorm: apprenticeships associate degrees career training
- Domain
- evit.edu
Incident
- Discovered
- Jan 9, 2024
- Materiality determined
- —
- Notification sent
- Aug 13, 2024
- Affected individuals
- 208,717
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHICREDENTIALSAUTHENTICATIONBIOMETRICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to appropriate authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 31 weeks(217 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.