What Happened?
On December 23, 2024, Monroe University became aware of a security incident on its computer systems. Upon detection, Monroe launched an investigation with the assistance of third-party cyber security experts to determine the nature and scope of the incident. The investigation determined that an unauthorized third party gained access to Monroe’s systems and acquired copies of certain files between December 9, 2024, and December 23, 2024. Monroe conducted a comprehensive review of the impacted data to determine what information was compromised and identified affected individuals.
On September 30, 2025, Monroe completed its review and identified persons whose sensitive data was included in the impacted files. On January 2, 2026, Monroe began mailing notice letters to impacted individuals. On January 13, 2026, Monroe submitted notice of the breach to public authorities including the Attorneys General of Maine and Massachusetts.