South Suburban College data breach affects 96,012 Americans, exposing these types of sensitive information

On August 7, 2024, South Suburban College (SSC) disclosed a significant data breach to the Maine and Massachusetts Attorneys Generals offices.

The breach was first detected on November 8, 2023, when SSC identified a cybersecurity attack involving an unauthorized third party attempting to infiltrate the college’s network and demand a ransom payment. Upon detection, SSC swiftly secured its network and launched an investigation with the help of independent IT security and forensic experts to determine the extent of the unauthorized access.

The investigation revealed that a significant data breach had occurred and it had affected 96,012 individuals in the United States.

Furthermore, sensitive personally identifiable information may have been exposed in the breach including names, social security numbers, dates of birth, and mailing addresses.

Although SSC has found no evidence that the exposed information has been misused, it remains possible that personal data could have been accessed.

In response to the data breach, SSC has taken several measures to protect affected individuals and prevent future incidents. The college has engaged external cybersecurity experts to enhance its security measures and policies. Additionally, SSC is providing affected individuals with access to Single Bureau Credit Monitoring, Single Bureau Credit Report, and Single Bureau Credit Score services at no charge for twelve months. These services, provided by TransUnion, include alerts for any changes to credit files and proactive fraud assistance.

Although the breach was first detected on November 8, 2023, CCS did not notify those affected until August 5, 2024.

For more details, you can view the disclosure on the Maine Attorney General's website and the Massachusetts Attorney General's website