On February 15, 2024, Justice Resource Institute (JRI) in Needham Heights, MA, experienced a cybersecurity incident where unauthorized access to their network environment occurred. The organization swiftly responded by shutting off network access and engaging a third-party forensic firm to investigate the breach. By May 29, 2024, JRI determined that personal and health information might have been acquired by the unauthorized party, though there is no evidence of misuse or identity theft reported so far.
The exposed information varied among individuals but potentially included names, addresses, dates of birth, Social Security numbers, health insurance details, and medical treatment information. Not every affected individual had all these details compromised, as the data exposed was different for each person.
In response to the breach, JRI has enhanced its technical safeguards and continues to monitor and secure its network environment. They have arranged for complimentary credit monitoring and identity theft protection services for all impacted individuals for twelve months to mitigate potential risks and offer support.
JRI has provided instructions to affected individuals on how to protect their personal information and encouraged them to enroll in the offered protection services. The organization remains committed to maintaining data security and addressing any concerns arising from this incident.
Reference: