HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
Villa Maria College Athletics
bd_9a58286d203abc01 · schema v1 · pii pii-v1
Full breach record for Villa Maria College Athletics →Villa Maria College notified individuals of a data privacy event where unauthorized access occurred between August 7 and 14, 2024. Personal information, including names, SSNs, driver's licenses, financial account, and payment card data, may have been accessed. The college reset passwords, retained forensic specialists, and reported to federal law enforcement. Affected individuals are offered 12 months of credit monitoring.
Massachusetts clock✗ MA AG >90d21 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-804-villa-maria-college/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 3ed1ec43c083010c3867df505d41166db8836662fa4d14081f0e72b5d3f2cf88
Reporting entity
- Name
- Villa Maria College Athleticsnorm: villa maria college athletics
- Domain
- villavikings.com
Victim entity
- Name
- Villa Maria College Athleticsnorm: villa maria college athletics
- Domain
- villavikings.com
Incident
- Discovered
- Aug 12, 2024
- Materiality determined
- —
- Notification sent
- May 18, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- reporting this event to federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 months(627 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.