MalwareEducationEducationRansomwareSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountIdentity (basic)LowContained

Wilmington University

bd_ceb8eb1da5d44e42 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 24, 2019

To disclose

—

Affected

1state residents only

Confidence

65%

Wilmington University's Campus Store vendor, PrismRBS, suffered a security incident between April 13-26, 2019. An unauthorized party installed malicious software on PrismRBS servers to capture payment card information (names, numbers, CVV, billing info) from transactions on the university bookstore website. No SSN or driver's license data was affected. The university is offering one year of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 13, 2019

Begins

Jun 24, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Wilmington University
norm: wilmington university
Domain: wilmu.edu

Name: Wilmington University
norm: wilmington university
Domain: wilmu.edu
Industry: Educationllm

Discovered: —
Breach occurred: Apr 13, 2019 – Apr 26, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input Capture
Threat actor: ExternalFinancial
Third party: via PrismRBS
Initial access: supply_chain

During the incident: PrismRBS is taking steps to enhance the security of its systems, including implementing additional threat monitoring and detection tools
Working with our security team to determine whether any additional security measures are needed on Wilmington University systems
Evaluating our relationship with PrismRBS moving forward
Offering one year of identity protection services through IdentityWorks
Changes made: Implementing additional threat monitoring and detection tools
Evaluating our relationship with PrismRBS moving forward
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-MT_Notification_Ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 24, 2019
Raw hash: 52ee5fb1e836843f47419f2870a01e84c3bfbaf4c36ac15b2bcea73687340d74

Reporting entityWilmington University

Victim entityWilmington University

IncidentThird-Party / Supply Chain

Stated responsePrismRBS is taking steps to enhance the security of its systems, including implementing additional threat monitoring and detection tools

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov