St. Andrew’s Resources for Seniors System (St. Andrew’s) has reported a significant cybersecurity incident that impacted its computer systems, potentially exposing sensitive personal of individuals. The breach has affected a total of 16,869 individuals, with 2 of those individuals residing in Maine.
Although there is no confirmed evidence of misuse at this time, affected individuals are encouraged to stay vigilant. It’s recommended to closely monitor financial accounts, update passwords, and be cautious of potential phishing attempts. For guidance on safeguarding your information after this incident, explore this resource on how to take action after a data breach and minimize potential harm.
Details of the St. Andrew’s Resources for Seniors System Data Breach
St. Andrew’s has reported a significant data breach following suspicious activity in its employee email accounts. The incident was discovered on February 8, 2024, after the company became aware of unusual activity in certain accounts. An investigation was promptly initiated, with assistance from third-party forensic experts, to determine the scope and nature of the breach.
The investigation revealed that an unauthorized actor had gained access to the email accounts of certain employees. St. Andrew’s then conducted a thorough review of the contents of the affected email accounts to assess the potential exposure of personal data. The review was finalized on January 6, 2025, revealing that the compromised information included names and Social Security numbers.
Due to the sensitive nature of the breach, St. Andrew’s took swift action to notify impacted individuals. Written notices were sent to two Maine residents on February 7, 2025, in the form of personalized letters. Additionally, due to difficulty locating contact information for some individuals, substitute notice was posted on St. Andrew’s website and provided through media outlets, ensuring that all potentially affected individuals were informed.
In accordance with regulatory requirements, St. Andrew’s has notified the three major credit reporting agencies—Equifax, Experian, and TransUnion—about the breach. The company also provided written notice to relevant state regulators and will continue to cooperate with any ensuing investigations.
To help those affected by the breach, St. Andrew’s is offering complimentary credit monitoring services for one year through CyberScout, a TransUnion company.
