The May Institute, Inc.

ent_d2cccfb0deb2b2d6a8fdc3c2

Compliance scorecard →View in feed →

Disclosures

State AG · HHS OCR · 6 jurisdictions

Multi-filing incidents

incidents joining 2+ filings here

Max affected reported

15,111

nationwide · State AG ME

Leak-site claims

none in sample

Identity resolution

Canonical name: The May Institute, Inc.
Normalized: the may institute— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (20)newest first

Massachusetts State AGas victim2025-08-14
The May Institute, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-14. 297 Massachusetts residents were affected.
Massachusetts State AGas victim2025-06-05
THE MAY INSTITUTE reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-05. 1 Massachusetts residents were affected.
Maine State AGas victim2024-05-07
The May Institute, Inc. experienced an external system breach on December 4, 2023, which was discovered on December 14, 2023. The breach affected 53 Maine residents, compromising their names and Social Security numbers. The organization notified the affected individuals on May 7, 2024, and offered 24 months of identity theft protection services through IDX.
Vermont State AGas victim2024-05-07
The May Institute notified consumers of a cybersecurity incident where unauthorized actors accessed files containing PII and PHI (names, SSNs, DOBs, driver's licenses, medical claims, and clinical information) starting December 5, 2023. The incident was discovered on December 14, 2023. The organization engaged in investigation, secured systems, notified federal law enforcement, and offered credit monitoring services.
New Hampshire State AGas victim2024-05-07
May Institute, Inc. notified New Hampshire residents of a data breach where unauthorized actors accessed files containing personal information (including SSNs) between Dec 5-14, 2023. The incident was discovered on Dec 14, 2023. Notices were sent starting April 1, 2024, affecting 153 NH residents. The Institute engaged law enforcement, notified HHS, and offered credit monitoring.
California State AGas victim2024-05-07
The May Institute, Inc. notified the California Attorney General of a data breach where an unauthorized actor potentially accessed or took files on December 5, 2023. The organization became aware of suspicious activity on December 14, 2023. Affected data may include names, addresses, dates of birth, Social Security numbers, driver's license numbers, medical claims information, clinical information, and health insurance information. The company launched an investigation, secured systems, notified law enforcement, and is offering identity theft protection services.
New Hampshire State AGas victim2024-04-01
The May Institute, Inc. notified 136 New Hampshire residents of a cybersecurity incident discovered on December 14, 2023, involving unauthorized access to network files starting December 5, 2023. The breach potentially exposed personal information, including government identifiers. The Institute engaged federal law enforcement, notified HHS, and provided credit monitoring services through IDX to affected individuals.
Indiana State AGas victim2024-04-01
The May Institute, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-12-04 and was reported on 2024-04-01. 13 Indiana residents were affected. 12,619 individuals affected in total.
Vermont State AGas victim2024-04-01
The May Institute notified consumers of a security incident where unauthorized actors accessed files containing personal information starting December 5, 2023. The breach was discovered on December 14, 2023. The organization engaged in forensic investigation, secured systems, notified federal law enforcement, and offered credit monitoring services to affected individuals.
Maine State AGas victim2024-04-01
The May Institute, Inc. reported an external system breach (hacking) that occurred on December 4, 2023, and was discovered on December 14, 2023. The breach compromised names and Social Security Numbers of 12,619 individuals, including 47 Maine residents. Affected individuals were notified on April 1, 2024, and offered 24 months of identity theft protection services from IDX.
MASSACHUSETTSHHS OCRas victim2024-02-12
May Institute (MA) reported to HHS on 2024-02-12 a ransomware attack affecting 2,612 individuals. PHI on a network server was compromised, including names, Social Security numbers, addresses, driver's license numbers, dates of birth, medications, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media, and provided credit monitoring and identity theft protection services, as well as additional administrative and technical safeguards.
Massachusetts State AGas victim2019-03-28
May Institute reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-03-28. 1 Massachusetts residents were affected. The report records the breach type as electronic.
Massachusetts State AGas victim2019-03-07
May Institute reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-03-07. 1 Massachusetts residents were affected. The report records the breach type as paper.
Massachusetts State AGas victim2016-07-13
May Institute reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-07-13. 10 Massachusetts residents were affected. The report records the breach type as electronic.
Massachusetts State AGas victim2016-01-14
The May Institute, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-01-14. 5 Massachusetts residents were affected. The report records the breach type as electronic.
Massachusetts State AGas victim2014-02-12
May Institute reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-02-12. 11,334 Massachusetts residents were affected.
Massachusetts State AGas victim2011-07-01
The May Institute Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-07-01. 42 Massachusetts residents were affected. The report records the breach type as electronic.
Massachusetts State AGas victim2011-01-13
The May Institute, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-01-13. 1 Massachusetts residents were affected. The report records the breach type as paper.
Massachusetts State AGas victim2009-10-26
The May Institute, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2009-10-26. 1 Massachusetts residents were affected. The report records the breach type as paper.
Massachusetts State AGas victim2009-07-23
The May Institute reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2009-07-23. 64 Massachusetts residents were affected. The report records the breach type as paper.