Virginia Prosecutor Files Class Action Lawsuit Against Georgetown University Over Data Breach

Summary:
A civil class action lawsuit has been filed by a Virginia county prosecutor, Mary Margaret Cleary, against Georgetown University following a recent data breach that exposed the personal information of current and former students. The breach, which occurred due to an internal error, allowed sensitive information to be accessed by unauthorized individuals. Cleary, a Georgetown alumna, is seeking damages, citing an increased risk of identity theft and financial fraud. Georgetown University has acknowledged the breach and taken steps to address the issue.
Georgetown University Faces Class Action Over Data Breach
Details of the Data Breach
Cause of the Breach: Internal Error
Georgetown University clarified that the breach was not caused by an external cyberattack or a compromise of its security systems. Instead, an inadvertent system setting change allowed unauthorized individuals, who had a school ID, to access sensitive information typically restricted to administrative staff. According to Little, the university has reached out to those who accessed the data, instructing them to delete any information they may have obtained.
Legal Action and Allegations
Georgetown's Response and Next Steps
As of now, Georgetown University has not issued a formal response to the lawsuit, and a spokesperson for the school has not provided any comment. Cleary’s attorneys, from the law firm Lowey Dannenberg, also declined to comment at this stage. The lawsuit seeks unspecified damages for those affected by the breach.
University’s Mitigation Efforts
In response to the breach, Georgetown University has made efforts to mitigate the damage. Doug Little emphasized that they are taking steps to ensure such a breach does not occur again. The university is reviewing its system settings and access protocols to prevent unauthorized access in the future.
Potential Implications for Students
For many affected individuals, the breach raises concerns about the safety of their personal information. The exposed data could lead to long-term consequences, including identity theft and financial fraud. The lawsuit will likely focus on addressing these risks and holding the university accountable for protecting students' data.