Arrowhead Regional Computing Consortium

Arrowhead Regional Computing Consortium (ARCC) notified the New Hampshire Attorney General of unauthorized network access detected on February 6, 2023. Forensic investigation confirmed on December 7, 2023, that personal information of approximately 25 NH residents was acquired. ARCC notified affected individuals on January 11, 2024, offering one year of identity theft protection services. Data included names and government IDs. No identity theft reported.

Arrowhead Regional Computing Consortium reported a data breach to the Indiana Attorney General. The breach occurred on 2023-02-06 and was reported on 2024-01-11. 76 Indiana residents were affected. 65,010 individuals affected in total.

Arrowhead Regional Computing Consortium notified the Vermont Attorney General of a data breach affecting 6 Rhode Island residents. The incident involved unauthorized access to personal information, including names, Social Security numbers, and financial account details. ARCC provided credit monitoring services and guidance on fraud alerts and security freezes.

Arrowhead Regional Computing Consortium (ARCC) reported a data breach affecting 65,010 individuals, including 25 Maine residents. The breach, which occurred on February 6, 2023, and was discovered on December 7, 2023, was the result of an external system breach (hacking). The compromised information includes names and Social Security numbers. ARCC began notifying affected individuals on January 11, 2024, and is offering 12 months of identity theft protection services through IDX CyberScan.

Arrowhead Regional Computing Consortium (ARCC) issued a consumer notification letter dated October 18, 2025, regarding a cybersecurity incident. The letter offers complimentary credit monitoring via IDX identity protection and advises victims on fraud alerts, security freezes, and credit reports. The breach impacted individuals across multiple states, including Montana, Iowa, Maryland, Massachusetts, New York, North Carolina, Oregon, Washington D.C., New Mexico, and Rhode Island. Specific data types affected include personal identifiers and financial information. The incident status is contained, with ARCC committed to safeguarding personal information.