Trocaire College, a private non-profit institution in Buffalo, New York, experienced an external system breach, specifically a hacking incident, between March 12, 2025, and March 14, 2025. The college discovered the breach on December 4, 2025. This incident led to the exposure of names and other personal identifiers for a total of 23,436 individuals, including 7 Maine residents. Notification to consumers began on January 16, 2026, through written letters, and identity theft protection services were offered for 12 months.
The confirmed data types exposed include names and other personal identifiers. The exact nature of "other personal identifiers" has not been publicly specified beyond this general categorization. While 23,436 individuals were affected in total, the specific breakdown of affected individuals by state, other than the 7 in Maine, remains unclear. The breach was reported to the Attorney General of Maine, and the college provided 12 months of identity theft protection services through IDX, which included credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.
Details about the full impact and any further investigations may emerge over time.