Syracuse University Must Face Privacy Claims After Data Breach

Syracuse University mostly lost its bid to dismiss a class action over a 2020 data breach.

Trevor Miller alleged that the breach occurred between Sept. 24 and Sept. 28, 2020, and that the hacker was able to obtain sensitive personal information for 9,800 students and prospective students. Although Syracuse discovered the breach on Sept. 28, it didn’t notify the class members until February 2021, when it sent them a letter offering a free year of credit monitoring, Miller said. He also alleged that in July 2021, his bank account was hacked.

Miller sought damages and an injunction compelling Syracuse to ...