Data Breach Notifications

Entity Information

  • Type of Organization: Education
  • Entity Name: Elizabethtown College
  • Street Address: One Alpha Drive
  • City: Elizabethtown
  • State, or Country if outside the US: PA
  • Zip Code: 17022

Submitted By

  • Name: Justin P. Webb
  • Title: Attorney
  • Firm name (if different than entity): Godfrey & Kahn S.C.
  • Telephone Number: 414-287-9527
  • Email Address: jwebb@gklaw.com
  • Relationship to entity whose information was compromised: Counsel

Breach Information

  • Total number of persons affected (including residents): 645
  • Total number of Maine residents affected: 6
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 02/01/2019
  • Date Breach Discovered: 11/02/2021
  • Description of the Breach:
    • Other
    • If other, please specify: On November 2, 2021, the College became aware that between February 2019 and November 2021, five files that contained the names, Social Security numbers, and/or addresses of members of the College community were saved in a shared folder accessible to users of the College’s network (the “Incident”). Immediately upon learning of the Incident, the College moved the files to a private folder. By the end of the week, the College retained outside counsel specializing in data security incidents and began investigating. At this time and based upon our investigation, the College does not have any evidence that any individuals’ personal information was accessed or stolen. Nonetheless, out of an abundance of caution, the College has decided to notify your office and the six (6) Maine residents potentially affected by this Incident on or about December 2, 2021.
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 12/02/2021
  • Copy of notice to affected Maine residents: FINAL Individual Notice - Adult - r1prf.PDF
  • Date of any previous (within 12 months) breach notifications: None
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 12 months; Experian IdentityWorks offered (includes credit monitoring, identity restoration, identity theft insurance services).