York County School of Technology experienced a data breach between March 27, 2023, and April 26, 2023, exposing sensitive personal information of students, staff, applicants, and other individuals. The compromised data included names, addresses, Social Security numbers, driver’s license numbers, and state ID numbers, leading to potential risks of identity theft, fraud, and financial harm. The breach resulted in a class action lawsuit, alleging that the school failed to adequately protect private information. Affected individuals were notified and offered compensation—either up to $5,000 for documented out-of-pocket losses (including credit monitoring, fraud resolution, and lost time) or a flat $45 payment for those without verifiable expenses. The settlement fund covers administrative costs, legal fees, and payouts to claimants, with payments expected within 60 days of court approval. The incident highlights significant vulnerabilities in data security, exposing both internal (employees, applicants) and external (students) stakeholders to long-term risks. The school denied wrongdoing but settled to avoid prolonged litigation, underscoring the financial and reputational consequences of the breach.