Data Breach Notifications

Entity Information

  • Type of Organization: Education
  • Entity Name: Bates College
  • Street Address: 217 Lane Hall, 2 Andrews Road
  • City: Lewiston
  • State, or Country if outside the US: Maine
  • Zip Code: 04240

Submitted By

  • Name: Chad Tracy
  • Title: Director of Information Security Privacy, and Compliance
  • Firm name (if different than entity):
  • Telephone Number: 207-786-6491
  • Email Address: ctracy@bates.edu
  • Relationship to entity whose information was compromised: Employee

Breach Information

  • Total number of persons affected (including residents): 393
  • Total number of Maine residents affected: 250
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: No
  • Date(s) Breach Occured: 05-30-2023
  • Date Breach Discovered: 06/20/2023
  • Description of the Breach:
    • Other
    • If other, please specify: Two third party companies Bates does business with where we provide our data (TIAA and National Student Clearinghouse) were compromised through the MOVEit breach
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 07/03/2023
  • Copy of notice to affected Maine residents: individual notice template - tiaa - 6.28.23_2841934.1_.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 2 year