MalwareEducationEducationRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Whitworth University

bd_eff70d4adcf75c39 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 29, 2022

Filed

Apr 28, 2023

To disclose

39 weeks

Affected

Not disclosed

Linked

11 records

Confidence

65%

Full breach record for Whitworth University →

Whitworth University notified employees of a ransomware attack detected on July 29, 2022. Unauthorized access to network shares exposed personal information including names, SSNs, state IDs, passport numbers, and health insurance data. The university engaged forensic specialists, notified law enforcement, rebuilt systems, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday39 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 39 weeks / 273 days

Jul 29, 2022

Discovered

Apr 28, 2023

Filed

This filing is one of 11 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 261 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_88fe38d865e0c77d2022-08-10 · +260dCandidate

Regulatory filings (9) · sorted by filing gap

Indiana State AGbd_5d844bede7e0dbd92023-04-28Verified
Montana State AGbd_a95dbb769635964d2023-05-12 · +14dVerified
New Hampshire State AGbd_e0cb1c9df0d3debc2023-05-12 · +14dVerified by operator
California State AGbd_000f0e63ede62e352023-05-13 · +15dVerified by operator

Show 5 more filings ↓up to 206d gap

Maine State AGbd_1b5f2a226647531b2023-05-13 · +15dVerified by operator
Oregon State AGbd_513ded4de33ab4772023-05-13 · +15dVerified by operator
Massachusetts State AGbd_703a926d3e579ba32023-05-13 · +15dVerified by operator
Idaho State AGbd_57d2ad17d82130962023-05-19 · +21dVerified
Washington State AGbd_9ba14f07862a4b382022-10-04 · +206dCandidate

Name: Whitworth University
norm: whitworth university
Domain: whitworth.edu

Name: Whitworth University
norm: whitworth university
Domain: whitworth.edu
Industry: Educationllm

Discovered: Jul 29, 2022
Materiality determined: —
Notification sent: Oct 3, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged third-party forensic specialists
Notified law enforcement
Wiped and rebuilt affected systems
Offered free credit monitoring and identity theft protection services through IDX
Changes made: Bolstered network security
Reviewed and altered policies, procedures, and network security software
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(273 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Washington State AGOct 4 · first

Indiana State AG+206d

Vermont State AG+206d · this page

Montana State AG+220d

New Hampshire State AG+220d

California State AG+221d

Maine State AG+221d

Oregon State AG+221d

Massachusetts State AG+221d

Idaho State AG+227d

Pattern: first filing Oct 4 (WA), last May 19 (ID) — a 227-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-04-28-whitworth-university-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 28, 2023
Raw hash: bcee1d8a70c9ae5c9a3df61e364461eedcdef24c18942830ee89741d08cb6d49

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityWhitworth University

Victim entityWhitworth University

Incidentdiscovered Jul 29, 2022

Stated responseEngaged third-party forensic specialists

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov