Institute of Culinary Education Data Breach Affects 33k

On May 5, 2025, The Institute of Culinary Education (ICE) experienced a major data breach when a cybercriminal gained access to certain internal systems and copied files containing sensitive information. The cyberattack was discovered after the institute detected suspicious activity within its network.

An investigation was launched and confirmed that files containing personal information of certain current and former students, as well as other individuals, were compromised. Exposed information included names, Social Security numbers, dates of birth, driver’s license numbers, and U.S. alien registration numbers.

The breach has impacted a total number of 33,342 people according to a filing with the Maine Attorney General.

The Institute of Culinary Education has begun notifying affected individuals by mail. The educational organization also published a notice of data event on its website.

The data breach was disclosed to multiple state authorities between Oct. 6, 2025 and Oct. 7, 2025, including California, Texas, Vermont, Maine, Massachusetts, Montana and New Hampshire. Impacted students and staff includes 432 in Texas, 22 in Montana, 184 Massachusetts residents, 46 in Maine and 34 New Hampshire residents.

The Institute of Culinary Education's response

In addition to notifying impacted students by mail, the institute has established a dedicated assistance line at 855-291-2584, Monday-Friday, 9:00 a.m. to 5:30 p.m., EST. The educational institute is also offering free credit monitoring services to all impacted individuals.

If you believe your personal information may have been compromised in this breach or receive a notice in the mail:

• Carefully review any notice you receive from The Institute of Culinary Education and sign up for the free credit monitoring services offered.
• Monitor financial accounts and credit reports for signs of identity theft.
• Consider placing fraud alerts or credit freezes with the major credit bureaus.
• Be cautious of unsolicited emails or phone calls requesting personal information.