Clackamas Community College Data Breach Exposes Sensitive Information of 33,381 Individuals
On December 18, 2025, Clackamas Community College (CCC) disclosed a data breach affecting 33,381 individuals across the U.S. The incident stemmed from unauthorized access to a limited number of the college’s systems, with an unknown third party exfiltrating files on October 24, 2025.
Suspicious activity was first detected on September 10, 2025, when unusual behavior was identified on a user account, prompting an immediate reset. Further investigation revealed additional unauthorized access, leading CCC to engage a forensic security firm to contain the threat and assess the scope of the breach.
The exposed data includes highly sensitive information such as names, dates of birth, Social Security numbers, student records, government and tax identification numbers, medical details, passport numbers, and financial account information. The breach was reported to state authorities, including the Maine Attorney General, Massachusetts Office of Consumer Affairs and Business Regulation, and Vermont Attorney General.
In response, CCC is offering affected individuals a complimentary one-year membership to IDX’s credit monitoring and identity theft protection services. While no evidence of misuse has been found, the college has provided guidance on enrolling in monitoring, placing fraud alerts, and reporting suspicious activity to financial institutions or law enforcement. Detailed instructions are available in the college’s official notice.
Source: https://www.claimdepot.com/data-breach/clackamas-community-college-2026
Clackamas Community College TPRM report: https://www.rankiteo.com/company/clackamas-community-college
"id": "cla1768252531",
"linkid": "clackamas-community-college",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '33,381',
'industry': 'Education',
'location': 'United States',
'name': 'Clackamas Community College',
'type': 'Educational Institution'}],
'attack_vector': 'Unauthorized access',
'customer_advisories': 'Detailed instructions on enrolling in credit '
'monitoring, placing fraud alerts or credit freezes, '
'and contacting credit reporting agencies provided in '
'the notice to consumers.',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '33,381',
'personally_identifiable_information': 'Names, dates of '
'birth, Social '
'Security numbers, '
'student record '
'information, '
'government '
'identification '
'numbers, tax '
'identification '
'numbers, medical '
'information, passport '
'numbers, financial '
'account information',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal and sensitive '
'information'},
'date_detected': '2025-09-10',
'date_publicly_disclosed': '2025-12-18',
'description': 'On Dec. 18, 2025, Clackamas Community College discovered a '
'data breach that affected 33,381 individuals across the '
'United States. The breach resulted from unauthorized access '
'to a small number of the college’s systems, with files '
'acquired by an unknown third party on Oct. 24, 2025.',
'impact': {'data_compromised': 'Names, dates of birth, Social Security '
'numbers, student record information, '
'government identification numbers, tax '
'identification numbers, medical information, '
'passport numbers, financial account '
'information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Small number of the college’s systems'},
'investigation_status': 'Ongoing',
'recommendations': 'Affected individuals are advised to enroll in credit '
'monitoring, place fraud alerts or credit freezes, review '
'account statements, monitor credit reports, and report '
'suspicious activity to financial institutions and law '
'enforcement.',
'references': [{'source': 'Clackamas Community College Notice of a Data '
'Incident'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to Maine '
'Attorney General, '
'Massachusetts Office '
'of Consumer Affairs '
'and Business '
'Regulation, Vermont '
'Attorney General'},
'response': {'communication_strategy': 'Notice of a Data Incident posted to '
"the college's website, advisories to "
'affected individuals',
'containment_measures': 'Account reset, forensic investigation',
'remediation_measures': 'Credit monitoring and identity theft '
'protection services offered',
'third_party_assistance': 'Forensic security firm engaged'},
'threat_actor': 'Unknown third party',
'title': 'Clackamas Community College Data Breach',
'type': 'Data Breach'}