A former Georgetown University student and now Virginia official has filed a class-action lawsuit against her alma mater, following a data breach that exposed sensitive information of students past and present. The university acknowledged the breach earlier this week, explaining that a system misconfiguration led to the temporary leak.
Mary Margaret Cleary, a deputy official from Culpeper County and 2014 Georgetown graduate, spearheads the lawsuit, citing the exposure of Social Security numbers, tax IDs, payroll details, and other personal information. Cleary claims the breach has caused her “anxiety and stress” over potential risks like identity theft and financial fraud.
The data leak, lasting about 24 hours, gave 29 students and recent graduates access to administrative files. Georgetown’s Chief Information Officer, Doug Little, clarified that the issue did not stem from an external attack but rather an accidental settings change. Little stated that the university had contacted those who accessed the information and instructed them to delete any obtained data.
Cleary’s lawsuit, filed as a civil class action, demands unspecified damages. While Georgetown has yet to comment on the matter, Cleary referred inquiries to her legal team, who have also remained silent for now.
The case underscores rising concerns over institutional data management, especially as universities increasingly handle vast amounts of personal information in digital systems.