HackingVulnerability ExploitCapture Stored DataData ExfiltratedTargetedIDENTITY_GOVERNMENTPIIMediumActive
Boston University Framingham Heart Study
bd_903b27ce593af33a · schema v1 · pii pii-v1
Full breach record for Boston University Framingham Heart Study →Framingham Heart Study at Boston University and NHLBI reported that on September 8, 2024, they became aware of unusual activity on a server system. Cyber-attackers accessed the server and downloaded files containing unencrypted personal information, including Social Security numbers. The server was isolated and patched. Law enforcement was notified, and affected individuals are offered credit monitoring via Experian IdentityWorks.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_96527cc51218eb56Maine State AGfiled 2024-12-19(4d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/framingham-heart-study-boston-university-20241223.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2024
- Raw hash
- e518345c7f7fb6f4e3e1b1e380e6a7dd28fd2a6a7ca893566eb0fc5050aa2c34
Reporting entity
- Name
- Boston University Framingham Heart Studynorm: boston university framingham heart study
Victim entity
- Name
- Boston University Framingham Heart Studynorm: boston university framingham heart study
Incident
- Discovered
- Sep 8, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the appropriate law enforcement agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.