MalwareRansomwareData EncryptedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Whitworth University
bd_eff70d4adcf75c39 · schema v1 · pii pii-v1
Full breach record for Whitworth University →Whitworth University notified employees of a ransomware attack detected on July 29, 2022. Unauthorized access to network shares exposed personal information including names, SSNs, state IDs, passport numbers, and health insurance data. The university engaged forensic specialists, notified law enforcement, rebuilt systems, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday39 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by lockbit_3 about this victim predates this filing by 260 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-04-28-whitworth-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 28, 2023
- Raw hash
- bcee1d8a70c9ae5c9a3df61e364461eedcdef24c18942830ee89741d08cb6d49
Reporting entity
- Name
- Whitworth Universitynorm: whitworth university
- Domain
- whitworth.edu
Victim entity
- Name
- Whitworth Universitynorm: whitworth university
- Domain
- whitworth.edu
Incident
- Discovered
- Jul 29, 2022
- Materiality determined
- —
- Notification sent
- Oct 3, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 39 weeks(273 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.