Washington College Data Breach Victims Nearing Settlement for Ransomware Attack

Washington College in Kent County is making progress towards finalizing a settlement after a recent data breach caused by a ransomware attack. The breach affected over 13,000 individuals, including current and former students and employees. The settlement is set for final approval in May, but a recent court filing granted preliminary approval. The breach occurred between February and March 2023, and the college only notified those affected almost 250 days later. This delay is said to have exacerbated the impact on the victims. Washington College was unaware of the attack for 31 days after it began, and the lawsuit alleges the college failed to properly train its employees on cybersecurity protocols. The lawsuit, filed in Anne Arundel County, involves plaintiffs from various Maryland counties. The college’s Director of News and Media Relations expressed a desire to reach a resolution and move forward. If the settlement is approved, victims may be reimbursed for losses, expenses, and offered credit monitoring. The college may also be required to upgrade its information security policies and software to align with industry standards. The lawsuit was filed in the Anne Arundel County Circuit Court as part of settlement negotiations, with the parties opting for local court over federal court.