MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainTargetedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Oklahoma Baptist University
bd_bcc46f2c5e37574c · schema v1 · pii pii-v1
Full breach record for Oklahoma Baptist University →Oklahoma Baptist University reported a ransomware attack affecting its computing infrastructure. The incident involved two separate ransomware events in April and June 2023. The university detected the attack on June 15, 2023. The breach compromised personal information of students, staff, and potentially patients, including names, SSNs, and financial data. Approximately 12,000 individuals were affected. The university engaged forensic investigators, notified law enforcement, and provided credit monitoring to victims.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_41c600544a839cbfMontana State AGfiled 2023-09-06(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/oklahoma-baptist-university-20230912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2023
- Raw hash
- 48a8d404365507e9dbddd4f91a02b63137da69b63c61ebb00f2069a29883d0b3
Reporting entity
- Name
- Oklahoma Baptist Universitynorm: oklahoma baptist university
Victim entity
- Name
- Oklahoma Baptist Universitynorm: oklahoma baptist university
Incident
- Discovered
- Jun 15, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 12,000
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 weeks(89 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.