Lewis & Clark College

Lewis and Clark College reported an inadvertent release of PII for one student to the Idaho Attorney General on February 12, 2026. The incident was classified as an error/misdelivery. The affected student was notified, and preventive steps were implemented.

Lewis and Clark College reported a data breach to the Oregon Attorney General. The breach was reported on 2024-04-10. The breach occurred during 3/3/2023. The breach was discovered on 2/24/2024. Notice was sent on 3/22/2024.

Lewis and Clark College reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-03 and was reported on 2024-03-22. 91 Indiana residents were affected. 48,799 individuals affected in total.

Lewis and Clark College reported a ransomware incident affecting 9,725 Washington residents. Unauthorized access occurred on Feb 28, 2023, detected March 3, 2023. Data exfiltrated included PII. Notification sent March 22, 2024. Remediation included network strengthening and third-party security improvements.

Lewis and Clark College reported a data breach to the Maine Attorney General, affecting 110 Maine residents. The breach, which occurred on March 3, 2023, and was discovered on February 24, 2024, was described as an external system breach or hacking incident. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their associated security codes or PINs. The college began notifying affected individuals on March 22, 2024, and is offering 12 months of credit monitoring and identity theft protection services through CyberScout via TransUnion.

Lewis and Clark College issued a consumer notification letter dated December 15, 2025, regarding a cybersecurity incident. The letter advises affected individuals to place fraud alerts or security freezes on their credit files and provides contact information for major credit bureaus. It references impacted data including medical information and financial accounts, and lists state-specific resources for residents in Montana, Iowa, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Rhode Island, and Washington D.C.

Lewis and Clark College reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-22. 455 Massachusetts residents were affected.

Lewis and Clark College reported a data breach to the Oregon Attorney General. The breach was reported on 2024-03-22. The breach occurred during 3/3/2023 - 3/3/2023. The breach was discovered on 2/24/2024. 48,799 individuals were affected. Notice was sent on 3/22/2024.

Lewis and Clark College notified consumers of a data breach impacting personal information. The notice, filed with the Vermont Attorney General on March 22, 2024, specifically identifies 25 Rhode Island residents as affected. Data types impacted include identity basic and government identifiers. The notice provides standard identity theft prevention resources, including fraud alerts, security freezes, and credit monitoring guidance.

Lewis and Clark College detected unauthorized access to its network on March 3, 2023. Investigation determined bad actors took data on or about February 28, 2023. On February 24, 2024, the college determined impacted files contained personal information. The college engaged external cybersecurity professionals, secured the network, and is providing complimentary identity theft protection services. No specific data types were listed in the redacted notice, but PII is implied.

LEWIS AND CLARK COLLEGE filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-085). The register records the breach as discovered on March 3, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Lewis & Clark is a private institution with a public conscience, a residential campus with global reach. Students and faculty throughout all three of Lewis & Clark's schools - the undergraduate College of Arts and Sciences, the Graduate School of Education and Counseling, and the School of Law - pursue new ways of knowing by combining classic liberal learning with pioneering collaboration.

L&C, founded in 1970, is a two-year higher education institution with multiple campuses, a river research center, humanities center, training center