HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Stratford Festival
bd_bc8e4c3027cd226c · schema v1 · pii pii-v1
Full breach record for Stratford Festival →Stratford University notified consumers of a data security incident detected on August 27, 2022. An unauthorized individual accessed systems on August 26, 2022, obtaining personal information from the student database. The university engaged third-party forensic experts and is offering 12 months of credit monitoring and fraud assistance to affected individuals.
Vermont clock✗ VT AG >45 bday22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by revil about this victim predates this filing by 279 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_de866ea760ad4477Leak Siteavoslockerfiled 2022-12-26(31d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_ffc379629d3ab65aMontana State AGfiled 2023-01-26Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-01-26-stratford-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2023
- Raw hash
- 34893ffcaa771717aa9ff27da506d9d106d2e3292f1e8f16061fddadb9c4bfa5
Reporting entity
- Name
- Stratford Festivalnorm: stratford festival
- Domain
- stratfordfestival.ca
Victim entity
- Name
- Stratford Festivalnorm: stratford festival
- Domain
- stratfordfestival.ca
Incident
- Discovered
- Aug 27, 2022
- Materiality determined
- Jan 26, 2023
- Notification sent
- Jan 26, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(152 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.