HackingVulnerability ExploitCapture Stored DataData ExfiltratedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICPIIMediumContained
TRUSTEES OF BOSTON UNIVERSITY
bd_b933f2c183c58849 · schema v1 · pii pii-v1
Full breach record for TRUSTEES OF BOSTON UNIVERSITY →Boston University Framingham Heart Study disclosed a September 2024 security incident where unauthorized access to a server exposed personal information, including SSNs, names, addresses, and medical data. The study isolated the server, patched the vulnerability, notified law enforcement, and offered 24 months of credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-19-boston-university-framingham-heart-study-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2024
- Raw hash
- 8e5130670b38fe5ed4b53f43091699019bad506b95d5dfae280489e1086d7a0d
Reporting entity
- Name
- TRUSTEES OF BOSTON UNIVERSITYnorm: trustees of boston university
Victim entity
- Name
- TRUSTEES OF BOSTON UNIVERSITYnorm: trustees of boston university
Incident
- Discovered
- Sep 8, 2024
- Materiality determined
- —
- Notification sent
- Dec 19, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the appropriate law enforcement agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.