St. Joseph’s College of Maine

In March 2025, St. Joseph’s College of Maine experienced a cybersecurity incident resulting in a data breach that exposed the private information of 126,580 individuals, including 23,203 Maine residents. The breach led to a class action lawsuit, alleging the college failed to safeguard sensitive data, though the institution denied wrongdoing. Affected individuals were offered compensation of up to $2,000 for documented financial losses, credit monitoring services, and $25/hour (max $100) for time spent mitigating identity theft risks. The breach exposed victims to potential identity theft, fraud, and financial harm, prompting legal settlements to avoid prolonged litigation. The incident underscored vulnerabilities in the college’s cybersecurity measures, leading to reputational damage and financial liabilities from settlement payouts, legal fees, and administrative costs.

Source: https://www.claimdepot.com/settlements/st-josephs-data-settlement

TPRM report: https://www.rankiteo.com/company/stjoeshealing

"id": "stj1003410110425",
"linkid": "stjoeshealing",
"type": "Breach",
"date": "3/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '126,580 (including 23,203 Maine '
                                              'residents)',
                        'industry': 'Higher Education',
                        'location': 'Maine, USA',
                        'name': "St. Joseph's College of Maine",
                        'type': 'Educational Institution'}],
 'customer_advisories': 'Eligible individuals may file claims for compensation '
                        '(credit monitoring, unreimbursed losses, lost time) '
                        'by 2025-12-29. Payouts contingent on court approval '
                        '(2026-03-20).',
 'data_breach': {'number_of_records_exposed': '126,580',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (includes PII)',
                 'type_of_data_compromised': 'Private information (likely '
                                             'PII)'},
 'date_publicly_disclosed': '2025-03',
 'description': 'St. Joseph’s College of Maine has agreed to settle a class '
                'action lawsuit regarding alleged failures to safeguard '
                'private information during a cybersecurity incident in March '
                '2025. The breach potentially impacted 126,580 individuals, '
                'including 23,203 Maine residents. Affected individuals may '
                'claim up to $2,000 in compensation, credit monitoring '
                'services, and lost time reimbursement.',
 'impact': {'brand_reputation_impact': 'Class action lawsuit and settlement',
            'data_compromised': 'Private information (potentially including '
                                'PII)',
            'identity_theft_risk': 'High (credit monitoring and identity theft '
                                   'insurance offered)',
            'legal_liabilities': 'Settlement fund for affected individuals (up '
                                 'to $2,000 per claimant + credit monitoring)'},
 'investigation_status': 'Settled via class action (final approval hearing on '
                         '2026-03-20)',
 'post_incident_analysis': {'corrective_actions': 'Settlement agreement '
                                                  '(credit monitoring, '
                                                  'financial compensation) to '
                                                  'mitigate harm; no technical '
                                                  'details disclosed'},
 'references': [{'source': 'Class Action Settlement Notice (St. Joseph’s '
                           'College of Maine Data Breach)'},
                {'source': 'Maine Attorney General Disclosure'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit settled '
                                            '(denial of wrongdoing by the '
                                            'college)',
                           'regulatory_notifications': 'Disclosure filed with '
                                                       'the Maine Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Class action settlement '
                                        'notifications, claim submission '
                                        'process, and public disclosures'},
 'stakeholder_advisories': 'Settlement administrator contact: '
                           'StJosephsDataSettlement@atticusadmin.com or '
                           '1-800-313-5540',
 'title': "St. Joseph's College of Maine Data Breach Settlement",
 'type': 'Data Breach'}