On July 9, 2025, Saint Andrew's School of Boca Raton disclosed a data breach affecting people across the country. The incident impacted eight people in Massachusetts and three in New Hampshire, with additional notifications sent to Vermont residents.
According to filings with the Massachusetts, Vermont and New Hampshire attorneys general, the breach exposed personally identifiable information (PII) such as name, date of birth, Social Security number, individual taxpayer identification number and contact information.
While the exact method of the breach and the party responsible have not been disclosed, the nature of the exposed data like Social Security numbers raises concerns about the risk of identity theft and potential misuse.
The school reported the breach to authorities in Massachusetts, Vermont and New Hampshire on July 9, 2025. The official disclosure documents can be reviewed on the Massachusetts Attorney General's website, the Vermont Attorney General's website and the New Hampshire Attorney General's website.
Saint Andrew's School of Boca Raton has notified affected individuals in accordance with state data breach laws. The school has provided detailed notices to those whose information was compromised, outlining the types of data involved and recommended steps to protect against identity theft.
Given the sensitive nature of the information exposed, affected individuals should:
For more information, individuals can refer to the official notices linked above or contact the respective state attorney general's offices.
For more information, visit the Saint Andrew's School website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.