St. Joseph’s College of Maine reported unauthorized access to its network beginning December 15, 2023. Public reporting based on the college’s filing with the Maine Attorney General states that the unauthorized access continued through January 24, 2024, and that the college reported the incident to state authorities in March 2025. California’s breach-notification database lists March 21, 2025, as the notification date.
The incident affected 126,580 people. The publicly available sources reviewed for this record confirm exposure of personal information but do not identify the specific information elements, including whether Social Security numbers, medical information, or financial account information were involved. A class action, Gilmore et al. v. St. Joseph’s College of Maine, was filed in Maine Superior Court on March 31, 2025. The available litigation reporting states that preliminary settlement approval was granted in August 2025, with a final-approval hearing scheduled for March 20, 2026; the final disposition was not established by the sources reviewed.