On January 6, 2025, St. Andrew’s Resources for Seniors System discovered a significant data breach that impacted the personal information of 16,869 individuals across the United States. The breach was identified after the organization noticed suspicious activity in certain employee email accounts back in February 2024.
An investigation revealed that an unauthorized actor had gained access to these email accounts, potentially exposing sensitive information.
Compromised data:
The breach affected two residents in Maine, as reported to the Maine Attorney General's office.
In response to the breach, St. Andrew’s Resources for Seniors System took immediate action to secure their systems and prevent further unauthorized access. They engaged third-party forensic specialists to conduct a thorough investigation and review of the affected email accounts.
The organization also notified law enforcement and enhanced their existing security protocols to safeguard against future incidents.
For those affected by the breach, St. Andrew’s is offering one year of complimentary credit monitoring services through CyberScout, a TransUnion company. Affected individuals are encouraged to enroll in these services to help protect against identity theft and fraud.
Additionally, St. Andrew’s has provided guidance on how to place fraud alerts and security freezes on credit files, along with contact information for the national consumer reporting agencies.
It is crucial for individuals impacted by this breach to remain vigilant by regularly reviewing account statements and monitoring credit reports for any suspicious activity. St. Andrew’s has also set up a helpline, available for 90 days, to assist with any questions related to the incident.