Georgetown University faces class-action lawsuit following data breach

A Georgetown University graduate has filed a class-action lawsuit against the institution after a data breach on October 16 and 17 exposed sensitive personal information belonging to students and alumni. Mary Margaret “Maggie” Cleary, a 2014 graduate and now a prosecutor in Virginia, initiated the civil lawsuit on October 18, claiming the university failed to adequately protect private data, resulting in unlawful disclosure.

The breach exposed a range of sensitive details, including admissions records, academic and financial aid information, and social security numbers. Georgetown University acknowledged the incident on October 17 and instructed 29 individuals who had accessed the compromised data to delete any information they had obtained.

Cleary’s lawsuit accuses the university of negligence in protecting her and other former and current students’ personal information. It further alleges the school failed to comply with regulations designed to safeguard such data. As a class-action suit, it seeks unspecified damages on behalf of Cleary and other affected individuals, many of whom are current Georgetown students and recent graduates.

In her complaint, Cleary cited emotional distress caused by the breach and expressed concerns about potential financial damage. “The Data Breach has caused the Plaintiff to suffer anxiety and stress from concerns that she faces an increased risk of financial fraud, identity theft, fraud, and other types of monetary harm,” the lawsuit states. She also argues that the data exposure places her and others at an ongoing risk for identity theft and related financial damages. Neither Georgetown University nor Cleary’s lawyer, Anthony M. Christina of Lowey Dannenberg, have provided public comments on the case as of yet.