Trocaire College Ransomware Incident Exposes Social Security Numbers

On Dec. 4, 2025, Trocaire College, a private Catholic institution in Buffalo, N.Y., discovered that a ransomware attack had compromised its digital environment.

The incident, which was first detected as unusual activity on March 13, 2025, led to a forensic investigation with help from independent cybersecurity experts. The investigation determined that unauthorized actors accessed or acquired certain files between March 12 and March 13, 2025.

The threat actor known as INC RANSOM posted on the tor network, claiming to have obtained data belonging to Trocaire College. This group is known for targeting organizations with ransomware and threatening to release sensitive data if their demands are not met.

The incident was reported to the Maine Attorney General’s data breach disclosure, the Massachusetts Office of Consumer Affairs and Business Regulation, and the Vermont Attorney General’s data breach notice starting on Jan. 28, 2026.

According to the filings, the exposed information varies by individual but overall included personally identifiable information (PII) such as names, Social Security numbers, driver’s license or state identification numbers, passport numbers, and financial account information.

The breach impacted a total of 23,436 individuals in the United States, including 51 Massachusetts residents and seven Maine residents.

Trocaire College’s response

After detecting the unusual network activity, Trocaire College secured its systems and launched a comprehensive investigation. The college engaged independent cybersecurity experts to determine the scope of the incident and identify impacted individuals.

The college completed a detailed review of affected files by Dec. 4, 2025, and began notifying impacted individuals on Jan. 16, 2026, via written notice.

To support those whose Social Security numbers were involved, the college is offering 12 months of complimentary identity protection services through IDX. These services include credit and CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed identity theft recovery services. A dedicated call center has also been established to answer questions and assist affected individuals.

Trocaire College has provided guidance on how to place fraud alerts and security freezes on credit files, obtain free credit reports, and remain vigilant for signs of identity theft or fraud. Impacted individuals are encouraged to review their account statements, monitor their credit reports, and report any suspicious activity to law enforcement, the Federal Trade Commission, or their state’s attorney general.