HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICPIILowContained
Cambridge University Press Bookshop
bd_f3652a3364012f38 · schema v1 · pii pii-v1
Full breach record for Cambridge University Press Bookshop →Cambridge University Press & Assessment notified Vermont AG of a June 5, 2024 unauthorized access incident affecting a subsidiary in Australia. Personal information including names and addresses was accessed. The company engaged forensic experts, notified law enforcement, and is offering two years of Experian credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday46 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-23-cambridge-university-press-assessment-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2025
- Raw hash
- 18796e848af8ccc5068f72776119c1b2c7bd876670ebecec9602944c4f01d523
Reporting entity
- Name
- Cambridge University Press & Assessment: Libros para aprender inglésnorm: cambridge university press assessment libros para aprender ingles
- Domain
- cambridge.es
Victim entity
- Name
- Cambridge University Press Bookshopnorm: cambridge university press bookshop
- Domain
- cambridgebookshop.co.uk
Incident
- Discovered
- Jun 5, 2024
- Materiality determined
- —
- Notification sent
- Apr 8, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- informed law enforcement and are supporting their investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 46 weeks(322 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.