HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Hartwick College
bd_b1776cbc7a512651 · schema v1 · pii pii-v1
Full breach record for Hartwick College →Hartwick College notified consumers of a data security incident discovered on October 26, 2024. Suspicious activity indicated unauthorized access to personal information, including names and government identifiers. The college reported the incident to law enforcement, engaged independent experts, and offered 12-24 months of identity protection services through IDX.
Vermont clock✗ VT AG >45 bday24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by chort about this victim predates this filing by 142 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_0d312d19e0cdf60eLeak Sitechortfiled 2024-11-17(143d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_273f83dc01a77203Indiana State AGfiled 2025-04-08(1d gap)Verified
- bd_0cd0210692852633Maine State AGfiled 2025-04-11(2d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-09-hartwick-college-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 9, 2025
- Raw hash
- af21b490a18958edb301b59d6459538e3595ededb7e59161fad8c811e108b169
Reporting entity
- Name
- Hartwick Collegenorm: hartwick college
- Domain
- hartwick.edu
Victim entity
- Name
- Hartwick Collegenorm: hartwick college
- Domain
- hartwick.edu
Incident
- Discovered
- Oct 26, 2024
- Materiality determined
- —
- Notification sent
- Apr 8, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the matter to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 24 weeks(165 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.