Tufts University

Tufts University notified Vermont AG of unauthorized access to employee email accounts between Feb 15 and Apr 4, 2025. Attackers accessed emails containing names and financial account info of a limited number of individuals. Incident discovered March 26, 2025. Tufts reset passwords, notified law enforcement, and implemented additional safeguards.

Tufts University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-05-13. 14 Massachusetts residents were affected. The report records the breach type as electronic.

Tufts University notified the NH AG of a data security incident involving 2 NH residents. Personal information, including SSNs, belonging to Boston School of Occupational Therapy alumni was accessible on public web pages managed by the Digital Collections and Archives department. The error occurred between May 2019 and February 2020. Data was removed on March 23, 2020. Credit monitoring was offered.

Tufts University notified individuals of a cybersecurity incident where personal information, including Social Security numbers, was publicly accessible via the University's Digital Library and Archives. Unauthorized access potentially began on or about May 31, 2019. Tufts secured the data on March 23, 2020, upon notification. No direct evidence of misuse was found, but the University offered two years of Experian IdentityWorks credit monitoring.

Tufts University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-04-29. 24 Massachusetts residents were affected. The report records the breach type as electronic.

Tufts University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-07-08. 21 Massachusetts residents were affected. The report records the breach type as electronic.

Tufts University notified the NH AG that a stolen laptop containing SSNs of 73 individuals (1 NH resident) was stolen in late April 2011. Discovered June 16, 2011. Notices mailed July 8, 2011. Credit monitoring offered. Remediation included new security program and policy changes.

Tufts University filed a supplemental notice with the New Hampshire Attorney General regarding a malware incident involving the 'torpig' infostealer. The breach affected 73 New Hampshire residents, exposing Social Security numbers. The university engaged forensic investigators, isolated affected systems, and offered credit monitoring.

Tufts University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-05-26. 1,347 Massachusetts residents were affected. The report records the breach type as electronic.

Tufts University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2009-12-22. 134 Massachusetts residents were affected. The report records the breach type as electronic.