Baker University discloses December 2024 breach

Baker University in Kansas disclosed a December 2024 data breach, stating that suspicious activity on certain systems led to a network outage and an investigation found unauthorized access and/or acquisition of files between 2 December 2024 and 19 December 2024.

According to Baker University press release, the review identified data related to those affiliated with the university and included a range of personal information such as name, date of birth, driver’s licence number, financial account information, health and medical data, passport information, Social Security number, student identification number, and tax identification number.

The university says it is providing complimentary credit monitoring to individuals whose information was involved and is notifying state and federal regulators, while noting there is no evidence to indicate any compromised information was subject to actual or attempted identity theft or fraud. DataBreaches[.]net notes that no criminal gang claimed responsibility and the disclosure does not address whether there was an extortion demand or any payment.

Since the announcement, some law firms appear to be seeking plaintiffs for a potential class action; a related notification letter was submitted to the California Attorney General’s Office. According to Baker University press release, the institution has reviewed its security policies and implemented additional measures to protect against similar incidents in the future.