Strauss Borrelli PLLC, a leading data breach law firm, is investigating the Episcopal Church Foundation (“ECF”) regarding its recent data breach. The ECF data breach may have involved sensitive personal identifiable information belonging to over 1,400 individuals.1
ABOUT THE EPISCOPAL CHURCH FOUNDATION:
ECF is an independent religious institution based in New York.3 Founded in 1949, ECF provides lay-led and inclusive organization that helps build, vitalize and transform Episcopal faith communities focusing on formation, finance and resources.2,3 Headquartered in New York, New York, ECF employs over 10 individuals.3
WHAT HAPPENED?
Recently, ECF reported to the Attorney General of Maine that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been compromised. According to the breach notice, on February 17, 2025, ECF learned that a third-party IT vendor that managed some of its IT systems experienced a cybersecurity incident. This incident resulted in unauthorized activity on ECF’s IT systems.1 As a result, ECF launched an investigation to determine the nature of the incident.
Through its investigation, ECF confirmed that sensitive personal information in its systems may have been accessed and acquired by an unauthorized third party. As a result, ECF began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:5
- Name
- Social Security number
- Financial account information
- Credit/ debit card numbers
On July 28, 2025, ECF began mailing data breach notification letters to impacted individuals.1 Based on the breach notice sent to Maine residents, ECF is providing affected individuals with a list of the specific types of sensitive information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letters that ECF filed with the Attorney General of Maine is below.
If you received a breach notification letter from the Episcopal Church Foundation:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
