Almeida Law Group is investigating a data breach at Bennett College. If you were affected, contact Almeida Law Group.
About Bennett College
Bennett College is a private, historically Black liberal arts college for women, founded in 1873 and affiliated with the United Methodist Church. Located at 900 E. Washington Street in Greensboro, North Carolina, it is one of only two HBCUs in the United States that exclusively enroll women. The college operates on a microcollege model and offers programs in biology, interdisciplinary studies, business administration, and education.
What Happened?
Bennett College was listed in a California Attorney General sample breach notice reported on August 28th, 2026. The breach notice, signed by Acting President Ronald L. Carter, offers affected individuals 12 months of single-bureau credit monitoring through Cyberscout, a TransUnion company. The notice does not specify what categories of personal information were compromised, as the data types field in the notice uses an individualized placeholder rather than naming specific data elements.
The ransomware group Incransom claimed responsibility for an attack on Bennett College, with an estimated attack date of December 5th, 2025, and a discovery date of December 6th, 2025, according to dark web monitoring sources. This is an attacker-side allegation and has not been independently confirmed by Bennett College or a regulator as a ransomware incident. The college’s notice to the California Attorney General was filed approximately nine months after the Incransom claim appeared, and the notice itself does not mention ransomware. Separately, Srourian Law Firm announced it is investigating a potential class action lawsuit against Bennett College related to this incident as of December 2025; no filed class action has been identified as of August 2026.
Key Facts at a Glance
- Company or Organization: Bennett College
- Industry: Higher Education (Private HBCU)
- Location: Greensboro, North Carolina
- Incident type: Data breach (ransomware alleged by Incransom group; not confirmed by college)
- Date of breach: December 5th, 2025 (attacker claim)
- Date breach discovered: December 6th, 2025 (attacker claim)
- Date of consumer notification: August 28th, 2026
- Identity theft protection offered: 12 months single-bureau credit monitoring via Cyberscout (TransUnion)
- Enrollment deadline: 90 days from the date of the notice letter
- Litigation status: Srourian Law Firm investigating potential class action as of December 2025; no filed lawsuit identified as of August 2026
- Source: California Attorney General breach report; Bennett College breach notice (PDF); Ransomware.live – Incransom group; Srourian Law Firm – Bennett College data breach
What Should You Do?
If you received a notice from Bennett College, enroll in the free credit monitoring offered through Cyberscout at bfs.cyberscout.com/activate within 90 days of the date on your letter. You should also place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to help prevent unauthorized accounts from being opened in your name. Review your credit reports for unfamiliar accounts or inquiries by visiting AnnualCreditReport.com, where you are entitled to free reports from each bureau. Monitor your financial accounts regularly for any suspicious activity. If you believe you have already been a victim of identity theft, visit IdentityTheft.gov for step-by-step guidance.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
