HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
D'Youville University
bd_cdad7f567c53be6b · schema v1 · pii pii-v1
Full breach record for D'Youville University →D'Youville University notified Vermont AG of a data breach discovered on Feb 8, 2023. Suspicious activity led to the acquisition of files containing full names and Social Security numbers of students. The university engaged forensic specialists, deployed EDR/MXDR tools, and offered 12 months of credit monitoring via Experian. No misuse of information was known at the time of notice.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-06-07-dyouville-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2023
- Raw hash
- 3dfd36e8de5f1cdd49eefb9e303442c6841f14fd75af6c78b3c7c8ba6e1d6c00
Reporting entity
- Name
- D'Youville Universitynorm: d youville university
Victim entity
- Name
- D'Youville Universitynorm: d youville university
Incident
- Discovered
- Feb 8, 2023
- Materiality determined
- —
- Notification sent
- Jun 7, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.