McMurry University Data Breach Affects 17,881 Individuals

McMurry University, a private Christian liberal arts institution, recently experienced a significant data breach that has impacted 17,881 individuals across the United States. The breach was discovered on November 15, 2024, following an investigation into suspicious activity on the university’s computer network.

The investigation revealed that between June 18, 2024, and June 20, 2024, an unauthorized actor gained access to certain systems on McMurry’s network and copied files containing sensitive personal information.

After a detailed review of the affected files, it was confirmed that the following types of information were exposed:

• Name
• Social Security number

The breach was reported to the Maine Attorney General and Massachusetts Attorney General on December 27, 2024. Notably, five residents in Maine were affected by the breach.

The incident underscores the severity of cyberattacks targeting educational institutions, as the breach compromised highly sensitive information, such as Social Security numbers, which could be used for identity theft or fraud.

McMurry University's response

Upon discovering the breach, McMurry University acted swiftly to investigate and address the incident. The university launched an internal investigation to assess the extent of the breach and secure its systems. Additionally, McMurry has implemented enhanced cybersecurity measures and is providing ongoing training to its employees to prevent similar incidents in the future.

To assist affected individuals, McMurry is offering 12 months of complimentary credit monitoring services through IDX, a ZeroFox company. Impacted individuals have been notified via written communication, with instructions on how to enroll in these services.

The university has also provided guidance on protecting against identity theft and fraud, including steps to place fraud alerts or security freezes on credit files, monitor financial accounts, and report suspicious activity to law enforcement or the Federal Trade Commission.

Affected by the McMurry University data breach?

If you believe you may have been affected by the McMurry University data breach, it is essential to take immediate action to safeguard your personal information. Here are the steps you should follow:

1. Enroll in credit monitoring services: McMurry is offering free credit monitoring for 12 months through IDX. Follow the instructions provided in the notification letter to enroll.
2. Monitor your financial accounts: Regularly review your bank statements, credit card transactions, and any other financial accounts for unauthorized activity.
3. Place a fraud alert or credit freeze: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to place a fraud alert or freeze on your credit file. This will make it harder for identity thieves to open accounts in your name.
4. Obtain your free credit report: Visit AnnualCreditReport.com to request your free credit report and check for any inaccuracies or unfamiliar accounts.
5. Report identity theft or fraud: If you suspect that your information has been misused, file a report with the Federal Trade Commission at IdentityTheft.gov and contact your local law enforcement agency.
6. Remain vigilant: Continue monitoring your personal and financial information for signs of fraud or identity theft, even after the initial 12-month credit monitoring period.