Cyber Incident Victim: Brigham Young University
Date:
Apr 2025
Location:
United States of America
Summary
Brigham Young University experiencedan external system breach resulting from hacking that compromised personal information of individuals, including five Maine residents. The breach was discovered after the incident and led to written notification of affected parties, accompanied by an offer of one year of credit monitoring and identity theft protection services through Experian. The university’s outside counsel submitted the breach notification details to the relevant state authority.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Brigham Young University, an educational institution located at 155 West 1230 North in Provo, Utah, experienced an external system breach that was classified as a hacking incident. The breach occurred on April 25, 2025, according to the university's records. The incident was not detected internally until July 1, 2025, when the breach was discovered. Upon discovery, the university engaged outside counsel, Benjamin Wanger of Baker & Hostetler LLP, to manage the breach response. The total number of individuals whose information was compromised has not been disclosed in the available notification. However, the breach affected five residents of the state of Maine.
Brigham Young University issued a written notification to affected individuals on July 23, 2025, following the discovery of the breach. The notification was sent to all persons whose information was compromised, including the five Maine residents identified in the report. As part of its response, the university offered identity theft protection services to those affected. The protection services were provided for a period of one year by Experian. Experian's offering included credit monitoring and identity theft protection components. The university confirmed that these services were made available to the affected individuals.