Social EngineeringPhishingDelayed DiscoveryCREDENTIALSPIILowContained
Alaska Pacific University
bd_e471a7db1b980a89 · schema v1 · pii pii-v1
Full breach record for Alaska Pacific University →Alaska Pacific University notified consumers of a data breach where an unauthorized actor accessed an employee email account between April 3-4, 2025. The incident involved potential viewing of emails containing personal information. The university offered 12 months of credit monitoring services.
Vermont clock✗ VT AG >45 bday39 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-29-alaska-pacific-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2025
- Raw hash
- 8585e05209f386bd94d81b9c8d52be364d28a23acee880c6349643352723e28a
Reporting entity
- Name
- Alaska Pacific Universitynorm: alaska pacific university
Victim entity
- Name
- Alaska Pacific Universitynorm: alaska pacific university
Incident
- Discovered
- Apr 3, 2025
- Materiality determined
- —
- Notification sent
- Dec 29, 2025
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALSPII
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 39 weeks(270 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.