Arrowhead Regional Computing Consortium Reaches $1.2M Data Breach Settlement
The Arrowhead Regional Computing Consortium (ARCC), a Minnesota-based provider of IT services to school districts, has agreed to a class action settlement following a February 6, 2023, data breach that exposed the personal information of approximately 65,379 individuals nationwide. The incident involved unauthorized access to sensitive data, including names, Social Security numbers, and student educational records.
Affected individuals those who received a breach notification may file claims for compensation under the settlement. Eligible class members can seek reimbursement for up to four hours of time spent addressing the breach at $20 per hour (up to $80) or opt for two years of three-bureau credit monitoring. Claims must be submitted online or by mail, with a deadline of October 8, 2026, and require a claim ID and PIN from the settlement notice.
The settlement fund, totaling $1.2 million, will cover administrative costs, attorneys’ fees (up to $315,000), service awards for class representatives ($6,000 total), credit monitoring expenses, and payouts to approved claimants. Payments will be distributed after the court’s final approval hearing on October 12, 2026.
The lawsuit alleged ARCC failed to adequately protect personal data, leading to the breach. While ARCC denies wrongdoing, it settled to avoid prolonged litigation. The opt-out deadline for class members is September 8, 2026.
Source: https://www.claimdepot.com/settlements/arrowhead-data-security-settlement
Arrowhead Regional Computing Consortium TPRM report: https://www.rankiteo.com/company/arrowhead-regional-computing-consortium
"id": "arr1785803403",
"linkid": "arrowhead-regional-computing-consortium",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '65379',
'industry': 'Education',
'location': 'Minnesota, USA',
'name': 'Arrowhead Regional Computing Consortium '
'(ARCC)',
'type': 'IT Service Provider'}],
'customer_advisories': 'Breach notification sent to affected individuals with '
'claim instructions',
'data_breach': {'number_of_records_exposed': '65379',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Student educational records']},
'date_detected': '2023-02-06',
'description': 'The Arrowhead Regional Computing Consortium (ARCC), a '
'Minnesota-based provider of IT services to school districts, '
'agreed to a class action settlement following a February 6, '
'2023, data breach that exposed the personal information of '
'approximately 65,379 individuals nationwide. The incident '
'involved unauthorized access to sensitive data, including '
'names, Social Security numbers, and student educational '
'records.',
'impact': {'data_compromised': 'Personal information, including names, Social '
'Security numbers, and student educational '
'records',
'financial_loss': '1200000',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action settlement'},
'investigation_status': 'Settled',
'post_incident_analysis': {'root_causes': 'Alleged failure to adequately '
'protect personal data'},
'references': [{'source': 'Class action settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Breach notification to affected '
'individuals'},
'title': 'Arrowhead Regional Computing Consortium Data Breach Settlement',
'type': 'Data Breach'}