Hartwick College Data Breach Investigation

Recently, Hartwick reported to the Attorney General of New Hampshire that it had experienced a data breach in which sensitive personal identifiable information in its care may have been accessed. According to the breach notice, on October 26, 2024, Hartwick discovered suspicious activity when temporary disruption of its computer network occurred.¹ As a result, Hartwick launched an investigation to determine the nature of the incident.

Through its investigation, on March 13, 2025, Hartwick confirmed that sensitive personal information in its systems may have been compromised by an unauthorized third party during the breach. As a result, Hartwick began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. The exact type of personal information potentially exposed has not been made publicly available by Hartwick. However, according to state reporting guidelines, “personal information” can include the following types of information:

• Name
• Social Security number
• Driver’s license or other government identification number
• Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual’s financial account

On April 8, 2025, Hartwick began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to New Hampshire residents, Hartwick is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that Hartwick filed with the Attorney General of New Hampshire is below.