UMass Amherst Data Breach
The 2026 UMass Amherst data breach was confirmed through the university's consumer notice and Massachusetts's official breach report. The state filing reports at least one affected Massachusetts resident.
This classification is based on a reviewed lower bound; the actual impact and severity may be higher.
Exposed Data Types
4- Names
- Physical addresses
- Social security numbers
- Financial information
About This Breach
The University of Massachusetts Amherst is the University of Massachusetts system's public research university in Amherst. The incident notice was issued by the university's Information Technology organization and chief information security officer.
How Did the Breach Happen?
The notice dated July 20, 2026 confirms that a data security event at UMass Amherst involved personal information. It does not disclose when the event began, when it was detected, or the technical method involved. The incident is therefore not characterized as ransomware or a network intrusion.
What Information Was Affected?
The notice identifies the affected data as a name, address, Social Security number, and bank account and routing number. In combination, these fields can create risks involving identity theft, fraudulent account opening, and financial fraud.
What Did the University Do?
UMass Amherst offered the affected person two years of Experian IdentityWorks monitoring and identity-restoration assistance. The university also provided its Information Security Office's official contact channel for questions.
What Should Affected People Do?
Notice recipients should regularly review bank activity and credit reports and report unfamiliar transactions directly to their financial institution. People whose Social Security number was involved may consider a free credit freeze or fraud alert and should use only the official enrollment links in their letter.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
