MalwareRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
Whitworth University
bd_e0cb1c9df0d3debc · schema v1 · pii pii-v1
Full breach record for Whitworth University →Whitworth University notified the NH Attorney General of a ransomware attack on July 29, 2022. The incident compromised personal information of students and employees, including 28 New Hampshire residents. Whitworth engaged forensic experts, rebuilt systems, and offered credit monitoring. No evidence of misuse was found.
Leak gap clock✗ Leak >180d41 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 274 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_000f0e63ede62e35California State AGfiled 2023-05-13(1d gap)Verified
- bd_1b5f2a226647531bMaine State AGfiled 2023-05-13(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/whitworth-university-20230512.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2023
- Raw hash
- 4fac25bbcfd7807c22661ba412c7d2339b87801d3a3cea217934a293328903fd
Reporting entity
- Name
- Whitworth Universitynorm: whitworth university
- Domain
- whitworth.edu
Victim entity
- Name
- Whitworth Universitynorm: whitworth university
- Domain
- whitworth.edu
Incident
- Discovered
- Jul 29, 2022
- Materiality determined
- —
- Notification sent
- Oct 3, 2022
- Affected individuals
- 28
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Department of Education which completed an investigation into the incident
Compliance
- Time to disclose
- 41 weeks(287 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.