LANSING — Lansing Community College has reported a February 2025 data breach that affected 175,000 people including out-of-state residents.
The data breach notice filed with the Office of the Maine Attorney General indicated a June 5 consumer notification date but it did not provide any details the victims except to say 174,307 people were affected and 31 were from Maine.
LCC Public Relations Director Marilyn Twine did not immediately respond to a request for on June 9.
This was not the first large data breach for the community college. A breach in 2022 and 2023 resulted in LCC putting up $1.45 million to settle legal claims over a breach that may have exposed information for more than 750,000 current and former students and employees as well as college applicants.
The victims in the 2022 and 2023 breach feared their names and social security numbers were stolen, and at least four lawsuits were filed in federal court against Lansing Community College.
The 2025 breach due to hacking happened Feb. 12, 2025, and continued until Feb. 18, 2025, according to the data breach notice a Grand Rapids attorney filed for the school with Maine regulators.
The notice included a sample letter to individual victims from William Garlick, LCC's chief information officer. He did not immediately respond to a request for .
"After discovering the issue, LCC promptly worked with third-party specialists to secure its systems, launched an investigation and determined that an unauthorized actor had gained access through credential compromise," Garlick said in his letter sample, which did not have a date.
He said in the letter sample there were no signs of identity theft or fraud, but, that "the information in the accessed system varied by individual and included personal information such as name, address, date of birth, Social Security number, driver's license, or other information provided to or maintained by Lansing Community College."
The letter further said proactive measures to further strengthen security were being taken to prevent similar incidents.
Maine regulators confirmed that LCC offered two years of complimentary credit monitoring and identity protection services to eligible individuals.
Grand Rapids attorney Jennifer Puplava of Mika Meyers PLC filed the data breach notice to Maine regulators. She did not immediately respond to a request for .
editor Susan Vela at [email protected] or 248-873-7044. Follow her on Twitter @susanvela.
This article originally appeared on Lansing State Journal: New Lansing Community College data breach affects 174,000 people
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
