Hackers stole over 125,000 individuals' data from St. Joseph’s College of Maine

Standish, Maine-based St. Joseph’s College of Maine said that the data security incident it suffered in 2023 compromised the sensitive personal information of more than 125,000 individuals.

 

Founded in 1912, St. Joseph’s College of Maine is the only private Catholic, liberal arts college in the U.S. state of Maine and enrolls more 1,700 students each year. The college also has more than 2,400 students from across all 50 U.S. states enrolled in its online programs.

 

In a data security incident notice filed with the Office of Maine Attorney General, St. Joseph’s said that in Fall 2023, it detected a cyber security incident affecting its computer systems and carried out an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“The investigation revealed that the unauthorised party gained access to our network between December 15, 2023, and January 24, 2024. On February 20, 2025, we determined that the unauthorised party had potentially accessed or acquired certain files that contained your personal information,” reads the notice.

 

According to the college, the compromised data included students’ names and other personal identifiers. The filing with the Maine state regulator also revealed that at least 126,580 people were impacted by the incident.

 

While St. Joseph’s found no evidence of the compromise data being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general. 

 

It has also offered one year of complimentary identity protection and credit monitoring services through Experian IdentityWorks Credit 3B to all affected individuals.

 

According to Comparitech, the Clop ransomware group claimed responsibility for the cyber attack on St. Joseph’s and listed it as a victim on its data leak site. The college has not verified the hacker group’s claims nor shared details on whether it paid a ransom.