McMurry University Data Breach Affects 17,881 Individuals

McMurry University, a private Christian liberal arts university based in Abilene, Texas, recently experienced a significant data breach that exposed sensitive personal information of 17,881 individuals across the United States. The breach was discovered on November 15, 2024, after an investigation into suspicious activity on the university's computer network.

The investigation revealed that between June 18, 2024, and June 20, 2024, an unauthorized actor gained access to certain systems within McMurry University's network and copied files containing personal information. The breach affected individuals in multiple states, with 16,237 impacted in Texas, 13 in Massachusetts, and 5 in Maine.

The types of information exposed in the breach included:

• Names
• Social Security numbers
• Driver’s license numbers
• Financial information (e.g., account numbers, credit or debit card numbers)
• Medical information
• Health insurance information

The breach was disclosed to state authorities in compliance with data breach notification laws. For example, McMurry University reported the incident to the Maine Attorney General on December 27, 2024, and to the Massachusetts Attorney General on December 23, 2024. The university also informed the Texas Attorney General on January 7, 2025.

The breach is particularly concerning due to the sensitive nature of the data involved, which could be used for identity theft, financial fraud, or other malicious activities.

McMurry University's response

In response to the breach, McMurry University took immediate steps to investigate and secure its systems. Upon discovering the suspicious activity on June 20, 2024, the university launched a thorough investigation to determine the scope of the breach and identify the affected individuals. The analysis of the compromised data was completed on November 15, 2024.

To mitigate the potential impact on affected individuals, McMurry University has:

• Notified all impacted individuals via written notice sent through U.S. Mail on December 23, 2024.
• Offered 12 months of complimentary credit monitoring and identity protection services through IDX, a ZeroFox company.
• Provided detailed guidance on how individuals can protect themselves from identity theft and fraud, including steps to monitor credit reports, place fraud alerts, and implement credit freezes.

The university has also implemented additional safeguards and is conducting employee training to strengthen its cybersecurity defenses and reduce the likelihood of future breaches.

McMurry University data breach class action lawsuit

A lawsuit has been filed against McMurry University in the U.S. District Court for the Texas Northern District. The lawsuit, officially known as Marquez v. McMurry University, was filed by Olivia Marquez. Ms. Marqueze is represented by the law firm, Strauss Borrelli PLLC.

Steps to take if you are affected by the data breach

If you received a notification letter from McMurry University or believe you may have been affected by this breach, it is important to take immediate action to protect your personal information. Here are some recommended steps:

1. Enroll in credit monitoring services: McMurry University is offering 12 months of free credit monitoring through IDX. Follow the instructions in your notification letter to enroll. If you need assistance, contact IDX at 1-877-720-7234.
2. Monitor your credit reports: Regularly review your credit reports for any suspicious activity or errors. You can obtain a free credit report annually from each of the three major credit bureaus (Equifax, Experian, and TransUnion) at AnnualCreditReport.com.
3. Place a fraud alert or credit freeze: Consider placing a fraud alert on your credit file, which will notify creditors to take extra steps to verify your identity before extending credit. Alternatively, you can place a credit freeze to prevent new accounts from being opened in your name without your authorization.
4. Stay vigilant: Monitor your bank accounts, credit card statements, and other financial accounts for unauthorized transactions. Report any suspicious activity to your financial institution immediately.
5. Protect against tax fraud: Be cautious of potential tax fraud. If your Social Security number was exposed, file your taxes early to reduce the risk of someone else using your information to file a fraudulent tax return.
6. Utilize resources: McMurry University has provided additional resources and contact information for the Federal Trade Commission (FTC) and state attorneys general. Visit IdentityTheft.gov for more information on how to protect yourself and recover from identity theft.

For any questions or concerns, you can contact McMurry University directly at 1-877-720-7234.

About McMurry University

McMurry University is a private Christian liberal arts institution located in Abilene, Texas. Its mission is to provide a Christian liberal arts and professional education that prepares students for a fulfilling life of leadership and service. The university emphasizes core values such as Christian faith, personal relationships, learning, excellence, and service. For more information, visit McMurry University's website.