Princeton University is facing a pair of proposed class-action lawsuits alleging it failed to protect personal data exposed from a November phone-based phishing scam.

The lawsuits, filed in U.S. District Court for New Jersey, claim Princeton failed to implement basic cybersecurity safeguards, allowing hackers to infiltrate an advancement database on Nov. 10 through the phishing scheme.

One plaintiff claimed that the attack put the personal information of more than 100,000 people at risk.

The Princeton University Advancement database stores biographical information pertaining to fundraising and alumni engagement activities, the university said on its website last week .

“We believe it does not contain passwords, Social Security numbers, credit card information, or bank account records

See Full Page