Saint Xavier University, a private Catholic institution based in Chicago, recently experienced a significant data breach. The breach was discovered on August 26, 2024, and it has been reported that approximately 212,267 people across the United States were impacted, including 22 residents of Maine.
The breach involved unauthorized access to certain files stored on the university's systems between June 29 and July 18, 2023. These files were downloaded by an unknown actor, leading to the exposure of sensitive personal information.
The types of consumer information exposed in this breach include:
The university became aware of suspicious activity on July 21, 2023, and promptly initiated an investigation with the help of external cybersecurity specialists. The investigation revealed that the breach occurred due to unauthorized access to limited systems within the university. This breach was publicly disclosed on October 30, 2024 to the Maine Attorney General's office.
In response to the data breach, Saint Xavier University took immediate steps to contain the suspicious activity and secure its systems. The university worked diligently to identify the individuals affected and began notifying them on October 30, 2024, through written communication.
Saint Xavier University has also notified federal law enforcement and is cooperating with them as part of the response effort.
To further protect the affected individuals, the university is offering 12 months of complimentary credit monitoring services through IDX, a ZeroFox company. Additionally, the university has reviewed and enhanced its data protection policies and procedures, implementing additional technical and administrative safeguards. Saint Xavier University is committed to providing guidance on preventing identity theft and fraud to those impacted.
If you have been affected by this data breach, it is crucial to take proactive steps to protect your personal information and minimize the risk of identity theft. Here are some recommended actions: