Dordt University

Dordt University has issued data breach notifications to 34,251 individuals following a cyber attack in April 2024. The attack, claimed by ransomware gang BianLian, allegedly resulted in the theft of 3 TB of data, including sensitive information such as an employee's Form I-9, driver's license, Social Security document, COVID-19 vaccination report card, and an Excel file containing details of 420 students. The data was potentially accessed between April 21, 2024, and May 16, 2024. Those affected are being offered free identity theft protection services via Experian.

Source: https://www.comparitech.com/news/dordt-university-notifies-34k-people-of-april-2024-data-breach-that-compromised-ssns-medical-info/

TPRM report: https://scoringcyber.rankiteo.com/company/cacecenter

"id": "cac822071525",
"linkid": "cacecenter",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 34251,
                        'industry': 'Education',
                        'name': 'Dordt University',
                        'type': 'Educational Institution'}],
 'data_breach': {'data_exfiltration': True,
                 'file_types_exposed': ['Form I-9',
                                        "Driver's license",
                                        'Social Security document',
                                        'COVID-19 vaccination report card',
                                        'Excel file'],
                 'number_of_records_exposed': 34251,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Employee Information',
                                              'Student Information']},
 'date_detected': 'April 21, 2024',
 'date_publicly_disclosed': 'June 2024',
 'description': 'Dordt University has begun issuing data breach notifications '
                'to 34,251 people following a cyber attack that started in '
                'April 2024. This attack was claimed by ransomware gang '
                'BianLian in June 2024, with 3 TB of data allegedly stolen.',
 'impact': {'data_compromised': ["Employee's Form I-9",
                                 "Driver's license",
                                 'Social Security document',
                                 'COVID-19 vaccination report card',
                                 'Details of 420 students'],
            'identity_theft_risk': True},
 'motivation': 'Data Theft',
 'ransomware': {'data_exfiltration': True},
 'references': [{'source': 'Comparitech'}],
 'response': {'communication_strategy': 'Data breach notifications',
              'third_party_assistance': ['Experian']},
 'threat_actor': 'BianLian',
 'title': 'Data Breach at Dordt University',
 'type': 'Data Breach'}