Lansing Community College

Lansing Community College reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-12 and was reported on 2026-06-19. 581 Indiana residents were affected. 174,307 individuals affected in total.

Lansing Community College identified unauthorized access to its network on February 18, 2025, caused by credential compromise occurring around February 12, 2025. The incident exposed personal information including names, addresses, dates of birth, Social Security numbers, and driver's license numbers. The college engaged cybersecurity experts, notified law enforcement, and is offering 24 months of credit monitoring. No evidence of data exfiltration or misuse was found.

Lansing Community College reported an external system breach (hacking) occurring on February 12, 2025, discovered on February 18, 2025. The incident affected 174,307 individuals, including 31 Maine residents. The college notified affected individuals in writing on June 5, 2026, and provided 24 months of credit monitoring services through Epiq-Privacy Solutions.

Mott Community College reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-16 and was reported on 2025-05-29. 11 Indiana residents were affected. 13,309 individuals affected in total.

Lansing Community College reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred between December 25, 2022, and March 15, 2023. The breach was discovered on May 24, 2023. The incident affected 138 Maine residents and involved the acquisition of names or other personal identifiers in combination with Social Security Numbers. The college began notifying affected individuals on June 30, 2023, and offered 12 months of credit monitoring and identity restoration services through Kroll.

Lansing Community College reported a data breach to the Oregon Attorney General. The breach was reported on 2023-06-30. 757,832 individuals were affected.

Lansing Community College notified individuals that an unauthorized actor may have accessed systems between December 25, 2022, and March 15, 2023. The college became aware of suspicious activity on March 14, 2023. Affected data may include names, Social Security numbers, and education records. The college engaged third-party specialists, notified law enforcement, and is offering 12 months of identity monitoring through Kroll.

Lansing Community College reported a data breach to the Montana Attorney General. The breach was reported on 2023-06-30. The breach occurred from 12/25/2022 to 3/15/2023. 180 Montana residents were affected.

Lansing Community College notified consumers of a data breach where an unauthorized actor accessed systems between Dec 2022 and Mar 2023. The incident involved identity information (names, SSNs, DOBs). LCC engaged third-party specialists, notified law enforcement, and offered 12 months of identity monitoring. Approximately 55 Rhode Island residents were identified as impacted.

Lansing Community College, a education sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-03-14 and filed notice on 2023-06-30. 1,120 Washington residents were affected. 108 days elapsed between awareness and notification. 79 days to identify the breach. 1 days to contain the breach.

Mott Community College reported to HHS on 2021-03-24 a Hacking/IT Incident affecting 1612 individuals. Breached information located on Network Server. The incident involved a ransomware attack compromising PHI (names, DOB, addresses, claims). The CE provided credit monitoring and implemented additional safeguards.

Lansing Community College (as Business Associate) reported to HHS on 2011-07-11 a Hacking/IT Incident affecting approximately 5,000 individuals. An unknown external actor from a foreign IP address attempted to bypass security mechanisms on a network server belonging to former BA AssureCare Risk Management, which administered the Lansing Community College Dental Care Plan. The server contained PHI including names, addresses, SSNs, and clinical information. Forensic investigation by Kroll Background America found it unlikely that member data was exfiltrated. The BA shut down the server, notified HHS, affected individuals, and media, and overhauled its security policies.