Cyber attack on Lansing Community College impacted nearly 175,000 people

Lansing Community College, one of Michigan’s leading public community colleges, reported that a data breach discovered last year exposed sensitive personal information of approximately 175,000 people.

 

Founded in 1957, Lansing Community College (LCC) is a public community college in Michigan that offers associate degrees, certificates, and workforce training programmes. As one of the state’s largest community colleges, it provides accessible and affordable education while supporting regional workforce development and facilitating student transfers to four-year institutions.

 

In a data security incident notice filed with the Office of Maine Attorney General, LCC said that on February 18, 2025, it detected unauthorised activity within its internal network. The college immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“After discovering the issue, LCC promptly worked with third-party specialists to secure its systems, launched an investigation and determined that an unauthorised actor had gained access through credential compromise on approximately February 12, 2025,” LCC said.

 

The compromised data included names, addresses, dates of birth, Social Security numbers, driver’s license, and other information provided to the college. The filing with the Maine state regulator also states that LCC has identified at least 174,307 individuals impacted by the incident.

 

While the college found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

It has also offered complimentary identity protection and credit monitoring services through Epiq to all affected individuals.

 

At the time of publishing, no known hacker group claimed responsibility for the cyber attack on LCC. The college also did not share details on who was behind the attack, how much data was compromised, or whether it had received a ransom demand.