The Rensselaer Polytechnic Institute (RPI) experienced a data breach in its Athletic Trainer System (ATS), discovered and reported on February 1, 2024, though the incident occurred between January 2020 and January 2021. The breach exposed sensitive personal information of students, including names, dates of birth, injury details, and potentially Social Security numbers. The exact number of affected individuals remains undisclosed. The FBI is actively prosecuting the party responsible for the breach. The compromised data—particularly Social Security numbers—poses significant risks, including identity theft, financial fraud, and long-term reputational harm to the institution. While the breach did not involve ransomware or immediate operational disruptions, the exposure of highly sensitive student records elevates the severity due to the potential for misuse of personal and financial data. The delayed discovery (2020–2021 to 2024) further exacerbates concerns about prolonged vulnerability and regulatory scrutiny under data protection laws.