Data Breach Notifications

Entity Information

  • Type of Organization: Education
  • Entity Name: Rensselaer Polytechnic Institute / Educational Computer Systems, Inc. (“ECSI”)
  • Street Address: 110 8th Street
  • City: Troy
  • State, or Country if outside the US: NY
  • Zip Code: 12180

Submitted By

  • Name: James Sylvan
  • Title: Associate General Counsel
  • Firm name (if different than entity): Rensselaer Polytechnic Institute
  • Telephone Number: 5182764235
  • Email Address: sylvaj@rpi.edu
  • Relationship to entity whose information was compromised: Rensselaer Polytechnic Institute owns the data held by a third party vendor, ECSI, that was compromised as a result of a cybersecurity incident.

Breach Information

  • Total number of persons affected (including residents): 1
  • Total number of Maine residents affected: 1
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: No
  • Date(s) Breach Occured: 10/29/2023
  • Date Breach Discovered: 02/12/2024
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 04/10/2024
  • Copy of notice to affected Maine residents: ME ECSI Individual Breach Notification Letter April 2024.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Experian has offered 24 months of credit and identity monitoring service and certain identity theft protection and resolution services, and up to $1 million in identity fraud loss reimbursement.