Sarah Lawrence College

Between September 4–9, 2025, an unauthorized external actor accessed one user's SharePoint account at Sarah Lawrence College (SLC) and potentially accessed files containing names and Social Security numbers. SLC discovered the suspicious activity on September 9, 2025. One Maine resident was affected. SLC notified affected individuals on October 9, 2025 and offered 12 months of credit monitoring through Cyberscout (TransUnion).

Affected (this filing): 1

Sarah Lawrence College notified consumers of a security incident occurring between September 4-9, 2025, involving unauthorized access to a user's SharePoint account. The incident potentially exposed personal information including names, Social Security numbers, dates of birth, and addresses. The College offered complimentary credit monitoring services through Cyberscout/TransUnion to affected individuals.