Northern Arizona University (NAU) suffered a data breach where unauthorized actors gained access to employee email accounts between February 7–8, 2022. The incident was disclosed over a year later, on April 5, 2023, by the Vermont Office of the Attorney General. While the exact scope of the breach—including the number of affected individuals and the types of compromised data—remains undisclosed, the unauthorized access to employee emails suggests potential exposure of sensitive internal communications, personally identifiable information (PII), or institutional data. The delay in reporting raises concerns about detection capabilities and transparency. Given the target (employee accounts), the breach likely involved internal operational or HR-related data, though the absence of confirmed details leaves the full impact ambiguous. The university’s response timeline and mitigation measures were not specified in the report.