On July 9, 2025, Saint Andrew's School of Boca Raton disclosed a data breach affecting people across the country. The incident impacted eight people in Massachusetts and three in New Hampshire, with additional notifications sent to Vermont residents.
According to filings with the Massachusetts, Vermont and New Hampshire attorneys general, the breach exposed personally identifiable information (PII) such as name, date of birth, Social Security number, individual taxpayer identification number and contact information.
While the exact method of the breach and the party responsible have not been disclosed, the nature of the exposed data like Social Security numbers raises concerns about the risk of identity theft and potential misuse.
The school reported the breach to authorities in Massachusetts, Vermont and New Hampshire on July 9, 2025. The official disclosure documents can be reviewed on the Massachusetts Attorney General's website, the Vermont Attorney General's website and the New Hampshire Attorney General's website.
Saint Andrew's School of Boca Raton has notified affected individuals in accordance with state data breach laws. The school has provided detailed notices to those whose information was compromised, outlining the types of data involved and recommended steps to protect against identity theft.
Given the sensitive nature of the information exposed, affected individuals should:
For more information, individuals can refer to the official notices linked above or contact the respective state attorney general's offices.
For more information, visit the Saint Andrew's School website.