On November 30, 2022, Suffolk University reported a data breach with the attorney general offices of several states after learning that an unauthorized party was able to access and remove certain files containing sensitive student information from the school’s computer network. According to Suffolk University, the breach resulted in the following student information being compromised: full names, Social Security numbers, driver’s license numbers, state identification numbers, financial account information and protected health information. Recently, Suffolk University sent out data breach letters to all affected parties, informing them of the incident and what they can do to protect themselves from identity theft and other frauds.
If you are a current or former student at Suffolk University, and you received a data breach letter from the school, it means your sensitive information was leaked and may now be in the hands of criminals. As we’ve noted previously, there is no way to definitively know what hackers will do with your information; however, the Suffolk University data breach certainly increases your risk of falling victim to identity theft or other frauds. That said, as a data breach victim, you have rights, and it is important you understand what they are and how you can enforce them.
What We Know About the Suffolk University Data Breach
The available information regarding the Suffolk University breach comes from the school’s various filings with the Attorneys General of Vermont, Massachusetts, California and Texas. According to these sources, Suffolk University recently discovered a potential cyber security incident. While the school does not mention when it first learned of the event, in response to this discovery, Suffolk University then secured its systems and launched an investigation in hopes of determining whether any confidential student or faculty information was leaked as a result of the intrusion.
The school’s investigation confirmed that an unauthorized party had gained access to the Suffolk University computer network. Further, this unauthorized party removed certain files containing sensitive information belonging to students and faculty.
Upon discovering that sensitive consumer data was made available to an unauthorized party, Suffolk University began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, driver’s license number, state identification number, financial account information and protected health information.
On November 30, 2022, Suffolk University sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident. While the total number of students affected by the Suffolk University data breach hasn’t been released, there are reportedly more than 36,000 victims in Massachusetts alone.
Founded in 1906, Suffolk University is a public university located in Boston, Massachusetts. The school offers more than 60 undergraduate, graduate and online degree programs through seventeen academic departments. The current student enrollment at Suffolk University is approximately 10,000, and the school employs a full-time faculty of over 900. In addition to the programs offered through the school’s main campus, Suffolk University also runs the Sawyer Business School and the Suffolk Law School. In total, Suffolk University employs more than 2,400 people and generates approximately $107 million in annual revenue.
