On November 7, 2023, R3 Education Inc. detected unusual activity on its network, indicating a cybersecurity incident. The company swiftly disconnected all network access and initiated an investigation to ascertain the scope and impact of the breach. It was discovered that an unauthorized party had gained access to the company's computer systems and had encrypted information stored on these systems. Despite extensive investigations, it could not be definitively ruled out that this unauthorized party also accessed sensitive information stored on the systems.
The types of consumer information exposed include:
Following the discovery of the breach, R3 Education Inc. engaged a specialized cybersecurity firm to conduct a thorough forensic investigation to understand the nature and scope of the incident. The company has since made significant changes to network access protocols, updated administrative credentials, and restored operations in a secure mode to mitigate the risk of future incidents. Additionally, R3 Education Inc. has offered 12 months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company, to all impacted individuals.
If you believe your information may have been compromised in this breach, it is crucial to remain vigilant by monitoring your financial accounts and credit reports for any unauthorized activity. Here are some recommended actions:
R3 Education Inc. is an education management company based in Devens, Massachusetts. It operates as the parent company for three universities located in the Caribbean, focusing on providing high-quality education and training in the medical field.
For more detailed information about the breach and to view the official notices, please visit the disclosure pages on the Maine Attorney General's website, the Texas Attorney General's website, the Massachusetts Attorney General's website, and the California Attorney General's website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.