Monroe University Data Breach Investigation

Chimicles Schwartz Kriner & Donaldson-Smith is investigating potential class action claims arising from a data security incident involving Monroe University, a private university based in New York, that may have impacted the personal information of approximately 320,973 individuals.

What Happened at Monroe University?

According to disclosures made by Monroe University and reporting by cybersecurity journalists, the university experienced a data security incident in December 2024 involving unauthorized access to its network.

Although the incident occurred in late 2024, Monroe University did not complete its investigation until much later. The university publicly disclosed the breach and began notifying affected individuals in January 2026, more than a year after the initial intrusion.

Public filings indicate that the university worked with third-party cybersecurity specialists to investigate the scope of the incident and identify the affected data.

What Information Was Compromised?

Based on disclosures to the Maine Attorney General and Monroe University’s own incident notice, the compromised data may include, but is not limited to, the following sensitive personal information:

• Names

• Social Security numbers

• Dates of birth

• Financial account information

• Other personal identifiers

Why Is This Important?

The exposure of highly sensitive personal and financial information places affected individuals at a significantly increased risk of identity theft, financial fraud, and other related harms. Social Security numbers and financial data are particularly valuable to criminals and can be exploited for years after a breach occurs.

The lengthy delay between the date of the breach and the date of disclosure may further increase the risk to affected individuals, as unauthorized access could have gone undetected for an extended period of time.

What Should You Do?

If you received a notification from Monroe University regarding this data breach, or if you believe your personal information may have been compromised, please contact one of our data breach attorneys by filling out the form below.