New York University
bd_9754eedac5fe459e · schema v1 · pii pii-v1
Full breach record for New York University →The Montana Department of Justice register lists this notice on 2024-06-09, before the breach it reports. The Nebraska, California, Oregon and Washington registers list the same notice on 2025-06-09, so we publish 2025-06-09 as the date it was filed.
New York University notified individuals in Montana and other states of a data breach where unauthorized actors accessed systems and exfiltrated files containing names and Social Security numbers between October 2024 and March 2025. NYU discovered the incident on March 22, 2025, and offered one year of complimentary credit monitoring and identity theft insurance.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 20, 2024
Begins
Mar 22, 2025
Discovered
Jun 9, 2025
Filed
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Nebraska State AGbd_00c72d90a03aba1c2025-06-09Verified
- Washington State AGbd_05f8e689f3bd918f2025-06-09Candidate
- Massachusetts State AGbd_674421756d9535652025-06-09Verified
- California State AGbd_92f7aa46daf295c82025-06-09Verified
Show 3 more filings ↓Show fewer ↑up to 8d gap
- Oregon State AGbd_ab260bd3e82b4dd22025-06-09Verified
- Texas State AGbd_b0c57e55c6e303e42025-06-10 · +1dVerified
- Illinois State AGbd_f77f5a5bbf5e05c32025-06-01 · +8dVerified
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Jun 1 (IL), last Jun 10 (TX) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.