The Research Foundation for the State University of New York experienced a data breach reported on November 12, 2021, stemming from an external system hack that occurred between May 22, 2021, and July 9, 2021. The incident compromised sensitive personal data of 4,293 individuals, including 9 Maine residents, with Social Security Numbers (SSNs) being the primary exposed information. The breach posed a significant risk of identity theft, prompting the organization to offer one year of free identity theft protection services via Experian to affected individuals. The breach was attributed to unauthorized access by external actors, indicating a targeted cyber intrusion. While the exact method of exploitation (e.g., phishing, vulnerability exploitation) was not detailed, the exposure of SSNs—highly sensitive identifiers—heightens the potential for long-term financial and reputational harm to victims. The foundation’s response included mitigation measures, but the breach underscores vulnerabilities in safeguarding personally identifiable information (PII) within academic and research institutions.