Sarah Lawrence College Data Breach – What You Need to Know

Sarah Lawrence College (SLC) is one of the nation’s leading liberal arts institutions, known for its individualized approach to education and strong academic programs. Like many educational institutions, it maintains student, staff, and alumni information within its internal systems. When that data is compromised, it can put individuals at risk of identity theft or privacy violations, even if only a small number of records are involved.

On September 9, 2025, SLC identified suspicious activity and launched an internal investigation. The inquiry revealed that between September 4 and September 9, 2025, an unauthorized individual accessed one employee’s SharePoint account and may have viewed or downloaded files stored there.

What Information May Have Been Exposed In the Data Breach

The files within the compromised SharePoint account contained names and Social Security numbers. While SLC’s investigation did not confirm any misuse of the data, this type of information can be highly sensitive. When exposed, it can lead to:

1. Identity theft and the creation of fraudulent accounts

2. Financial fraud or misuse of personal details

3. Targeted phishing or impersonation scams

Although the college found no evidence that the information has been misused, it conducted a thorough review to determine what data may have been affected and who was impacted. Written notification letters were mailed to affected individuals beginning October 9, 2025.

What Sarah Lawrence College Is Doing in Response

Immediately after discovering the incident, SLC took several steps to secure its systems and protect affected individuals. The college:

1. Launched a forensic investigation to determine how the breach occurred and what data was accessed

2. Reviewed and strengthened system security to prevent similar incidents in the future

3. Notified state regulators and affected individuals in accordance with legal requirements

4. Offered one year of free credit monitoring and identity restoration services through Cyberscout, a TransUnion company

Were You Affected By this Data Breach? Here Is What You Can Do to Protect Yourself

At Almeida Law Group, we understand that even a small-scale data breach can cause serious anxiety and confusion. If you received a notice from Sarah Lawrence College, there are important steps you can take to protect your personal information:

1. Activate your free credit monitoring through Cyberscout as soon as possible

2. Review your credit reports from Equifax, Experian, and TransUnion for any unfamiliar accounts or inquiries

3. Be cautious with unexpected emails, calls, or texts requesting personal details

4. Report suspicious activity immediately to your bank, credit card provider, or the credit bureaus

5. Consider placing a fraud alert or credit freeze to add an extra layer of protection

Remaining proactive can help prevent future misuse of your personal information. If you want to talk to our data breach law firm regarding the breach, you can contact us here for a free consultation.