Mount Saint Mary College Listed by vicesociety Ransomware Group

On February 9, 2023, Mount Saint Mary College appeared on the leak site operated by the Vice Society ransomware group. The private Catholic college in Newburgh, New York, confirmed that internal files had been exfiltrated during a ransomware attack. The listing does not specify the volume of data taken or name the exact records involved, but anyone connected to the college — students, alumni, faculty, staff, or their families — now faces the possibility that sensitive personal information is in attackers’ hands.

Details from the Leak Site

The Vice Society listing states that Mount Saint Mary College suffered a ransomware incident and that the group successfully exfiltrated internal files. No sample data was published at the time of the initial listing, and the disclosure does not quantify how many records were affected. The college itself has not released a detailed public breach notification that lists specific data types such as Social Security numbers, financial aid records, or health information. What is known is that the attackers claim to hold files taken from the college’s internal systems and are using the public listing to pressure the institution.

Why This Matters for You and Your Family

If you or your child attended, applied to, or worked at Mount Saint Mary College, your personal information may have been exposed. Colleges routinely store names, dates of birth, addresses, phone numbers, email accounts, student IDs, academic transcripts, and financial details. Even without an exact count, the breach represents a permanent risk: once data leaves the college’s control, it can be traded or sold on underground forums for years. For families, this often means both parent and student records are now linked, increasing the chance that one exposed record leads to compromise of the entire household.

Doxxing and Identity-Chain Risks

Exfiltrated internal files frequently contain more than isolated records. They can include spreadsheets that link student emails to home addresses, parent contact information, emergency contacts, and even payment methods. Attackers and subsequent buyers can chain these details with usernames found in the files to locate associated gaming accounts, social-media handles, and family networks. A credential leak from this incident can therefore cascade into account takeovers on Steam, Roblox, Discord, or school portals. Children’s gaming identities are especially vulnerable because the same email or password reused from a college system often protects those accounts. The result is not simply identity theft but full doxxing chains that expose your family’s real-world locations, relationships, and daily routines.

Vice Society’s Known Track Record

Public reporting attributes Vice Society’s emergence to mid-2021. The group has primarily targeted education, healthcare, and nonprofit organizations across the United States and Europe. Notable prior victims include school districts and smaller colleges where student and employee data were at stake. Their typical playbook involves gaining initial access through phishing or exploited remote desktop services, exfiltrating data before deploying ransomware, and then running a dual-extortion campaign: they threaten both encryption of the victim’s systems and public release of the stolen files. Vice Society often avoids immediate mass publication, instead maintaining pressure through countdown timers or incremental leaks on their site. The Mount Saint Mary College listing follows this established pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used at Mount Saint Mary College or related services, replace it with a unique passphrase everywhere it was reused, and enable 2FA through an authenticator app rather than SMS.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same breached email or address.
• Let remediation specialists manage takedown requests for any exposed personal information appearing on data-broker or underground sites.

The incident underscores that college data breaches continue to place ordinary families in the crosshairs long after the initial attack. Acting quickly on monitoring and credential hygiene limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Starting your DoxxScan trial today gives you and your family an active defense against both this claimed breach and the ones that will inevitably follow.