Data Breach Notifications

Entity Information

  • Type of Organization: Non-Profit
  • Entity Name: American Civil Liberties Union Foundation, Inc.
  • Street Address: 125 Broad Street
  • City: New York
  • State, or Country if outside the US: NY
  • Zip Code: 10004

Submitted By

  • Name: Elizabeth Bradford
  • Title: Co-Chief Corporate Counsel
  • Firm name (if different than entity):
  • Telephone Number: 646-905-8863
  • Email Address:
  • Relationship to entity whose information was compromised: Entity whose information was compromised is a subcontractor of ACLU

Breach Information

  • Total number of persons affected (including residents): 575
  • Total number of Maine residents affected: 10
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 05/29/2023
  • Date Breach Discovered: 06/22/2023
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 07/21/2023
  • Copy of notice to affected Maine residents: ACLUF FINAL (non-MA) Consumer Notice 7.21.23 TIAA Kaspick- PBI Incident.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 24 months; Kroll; credit monitoring, identity theft restoration, fraud consultation. Services are offered by Pension Benefit, LLC, the subcontractor that experienced the breach.