Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: University of Massachusetts Amherst Donahue Institute Data Breach

This file collects the dated facts on record for the University of Massachusetts Amherst Donahue Institute incident. The state report is dated February 20, 2026.

Timeline

February 20, 2026Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: February 20, 2026
Receiving office: Massachusetts Attorney General

Case notes

The University of Massachusetts Amherst Donahue Institute, a public sector research and development organization affiliated with the state university system, recently filed a report regarding a data security incident. Due to its extensive work in social research and public policy analysis, the institute routinely manages significant volumes of personal information.

This incident was formally reported on February 20, 2026, with the investigation currently ongoing. While the specific nature of the breach and the exact types of personal information involved have not been detailed in the public filings, the institute has acknowledged that a security event impacting its digital infrastructure occurred.

When personal information is exposed in a data incident, it can create a risk of various forms of identity-related fraud or unauthorized access to personal accounts. Individuals potentially affected should be aware of this elevated risk and take steps to protect themselves.

It is advisable for anyone who receives a direct notification about this incident to carefully review the information provided by the University of Massachusetts Amherst Donahue Institute. Monitoring financial statements and credit reports for any unusual activity is a recommended general precaution. Additionally, consider placing a fraud alert or security freeze on your credit files to prevent new accounts from being opened in your name without authorization. Regularly updating passwords for online accounts and enabling multi-factor authentication wherever possible also adds layers of security.

Questions about this case file

Where does the University of Massachusetts Amherst Donahue Institute case file come from?: Every entry is taken from the breach report University of Massachusetts Amherst Donahue Institute lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the University of Massachusetts Amherst Donahue Institute breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files