HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICLowContained
Bastyr University
bd_dd645b52d1ef8917 · schema v1 · pii pii-v1
Full breach record for Bastyr University →Bastyr University notified consumers of a data breach where unauthorized access occurred between April 23 and April 30, 2025. Suspicious activity was detected on April 30. The incident involved access to names and other data elements. Bastyr engaged forensic specialists and is offering credit monitoring services.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1c7b47783656fea7Washington State AGfiled 2025-09-17Candidate
- bd_765ee33dc60d6c28Indiana State AGfiled 2025-09-17Verified
- bd_cb6ba0f751c9ad35Maine State AGfiled 2025-09-17Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-17-bastyr-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 17, 2025
- Raw hash
- eebadcc5f48e2475cd623f5f215693bdc2723acd62f2409de272c407620e2a89
Reporting entity
- Name
- Bastyr Universitynorm: bastyr university
- Domain
- bastyr.edu
Victim entity
- Name
- Bastyr Universitynorm: bastyr university
- Domain
- bastyr.edu
Incident
- Discovered
- Apr 30, 2025
- Materiality determined
- —
- Notification sent
- Sep 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(140 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.