MalwareEducationEducationRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

TAYLOR UNIVERSITY, INC.

bd_dd49adeeaaa796a5 · schema v1 · pii pii-v1

Severity

High

Discovered

May 18, 2023

Filed

Dec 4, 2023

To disclose

29 weeks

Affected

1,066state residents only

Linked

7 filings

Confidence

68%

Full breach record for TAYLOR UNIVERSITY, INC. →3 incidents on file

Taylor University, an educational institution, disclosed a ransomware cyberattack affecting 1,066 Washington residents. The incident occurred between February 26 and May 18, 2023, with discovery on May 18, 2023. Compromised data included names, government IDs, and financial account information. The university offered 12 months of credit monitoring and notified the Washington AG.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d29 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 81 days

discovery → filing · 29 weeks / 200 days

Feb 26, 2023

Begins

May 18, 2023

Discovered

Dec 4, 2023

Filed

vs. sector median

+22 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemoneymessagebd_67c8a584173fa3022023-09-02 · +93dVerified by operator

Regulatory filings (5) · sorted by filing gap

California State AGbd_1b7bb050cef144fa2023-12-04Verified
Vermont State AGbd_3c4e1491de9d0f3f2023-12-04Verified
Massachusetts State AGbd_45f154f4b08534322023-12-04Verified
Montana State AGbd_537fffc8db6d7a0b2023-12-04Candidate

Show 1 more filing ↓

Maine State AGbd_b3f85d3382ca0dcd2023-12-04Verified by operator

Name: TAYLOR UNIVERSITY, INC.
norm: taylor university
Domain: taylor.edu
Industry: Education

Name: TAYLOR UNIVERSITY, INC.
norm: taylor university
Domain: taylor.edu
Industry: Education
Industry: Educationllm

Discovered: May 18, 2023
Breach occurred: Feb 26, 2023 – May 18, 2023
Undetected for: 81 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,066state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Washington Attorney General

During the incident: Offering 12 months of complimentary credit monitoring through IDX
Provided toll-free response line for affected individuals
Changes made: Continually evaluate and modify practices and internal controls to enhance security and privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(200 days from discovery to filing)
Compliance flags: WA AG >90dLeak >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

California State AGDec 4 · first

Vermont State AGDec 4 · first

Massachusetts State AGDec 4 · first

Montana State AGDec 4 · first

Maine State AGDec 4 · first

Washington State AGDec 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA27177.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 4, 2023
Raw hash: 375899ba80de5191ae2b9c47b9bbe29ccff63798a53895b91bda9e44f1a9bd81

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityTAYLOR UNIVERSITY, INC.

Victim entityTAYLOR UNIVERSITY, INC.

Incidentdiscovered May 18, 2023

Stated responseOffering 12 months of complimentary credit monitoring through IDX

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com