Cybersecurity Awareness
Protecting Your Data matters to Us
The University of St. Thomas-Houston (“USTH”) is providing notice of an event that may affect the privacy of certain information.
What Happened?
On or about August 12, 2025, USTH became aware of suspicious activity within our computer network. Upon discovery, we immediately took steps to secure our network and began working with third-party specialists to determine the full nature and scope of the activity. We also promptly notified law enforcement. The investigation determined that there was unauthorized access to certain systems within the USTH environment between July 25, 2025, and August 12, 2025, and that certain files were accessed and/or acquired by an unauthorized actor during that time. Upon completion of the investigation, we undertook a thorough and time-intensive review of the files impacted to determine the information contained therein and to whom the information related. We recently completed this review and are now notifying individuals via letter to home addresses, if available, based on the results.
What Information was Involved?
At this time, USTH is not aware of any identity theft or fraud in connection with this incident and is notifying those individuals whose information was present in the systems at the time of the incident. The information identified in the reviewed files included the following types of information: name, dates of birth, Social Security number, driver’s license numbers, state issued ID, non-US ID number passport number, military ID number, username & password, security questions and answers, student record information, financial account information, medical information, health insurance information.
What is USTH Doing?
We take this event and the security of personal information in our care very seriously. Upon learning of this incident, we promptly took steps to ensure the security of our systems and conducted a thorough investigation. As part of our ongoing commitment to the privacy of information in our care, we are reviewing our existing policies and procedures and are implementing additional technical security measures to reduce the likelihood of a similar incident. We have also reported this incident to law enforcement as well as the appropriate regulators. In addition, USTH is offering credit monitoring and identity theft protection services through Experian.
What You Can Do
USTH encourages you to remain vigilant over the next 12 to 24 months against incidents of identity theft and fraud by reviewing your account statements, monitoring your free credit reports for suspicious activity, and reporting any suspected identity theft your financial institution. Individuals may also review and consider the information and resources outlined in the below Steps You Can Take To Help Protect Your Information.
For More Information
USTH understands that you may have questions about this incident that are not addressed in this letter. If you have additional questions or concerns, please call our dedicated assistance line at 1-866-736-9716 You may call this toll-free line between the hours of 9:00 am to 9:00 pm Eastern Time (excluding major US holidays). You may also write to us at 3800 Montrose Blvd, Houston, TX 77006. USTH recommends that potentially impacted individuals follow the recommendations in the letter they received and contact the call center with any questions.
Steps You Can Take To Help Protect Your Information
Under U.S. law you are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also contact the three major credit bureaus directly to request a free copy of your credit report.
You have the right to place a “security freeze” on your credit report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization. The security freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a security freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a security freeze on your credit report. Should you wish to place a security freeze, please contact the major consumer reporting agencies listed below:
Experian
P.O. Box 9554
Allen, TX 75013
1-888-397-3742
www.experian.com/freeze/center.html
TransUnion
P.O. Box 160
Woodlyn, PA 19094
1-888-799-5355
www.transunion.com/credit-freeze
Equifax
P.O. Box 105788
Atlanta, GA 30348-5788
1-800-685-1111
www.equifax.com/personal/credit-report-services
In order to request a security freeze, you will need to provide the following information:
- Your full name (including middle initial as well as Jr., Sr., II, III, etc.);
- Social Security number;
- Date of birth;
- If you have moved in the past five (5) years, provide the addresses where you have lived over the prior five years;
- Proof of current address, such as a current utility bill or telephone bill;
- A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification, etc.);
- If you are a victim of identity theft, include a copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft.
As an alternative to a security freeze, you have the right to place an initial or extended “fraud alert” on your file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should you wish to place a fraud alert, please contact any one of the agencies listed below:
Experian
P.O. Box 9554
Allen, TX 75013
1-888-397-3742
www.experian.com/freeze/center.html
TransUnion
P.O. Box 160
Woodlyn, PA 19094
1-888-799-5355
www.transunion.com/credit-freeze
Equifax
P.O. Box 105788
Atlanta, GA 30348-5788
1-800-685-1111
www.equifax.com/personal/credit-report-services
You can further educate yourself regarding identity theft, fraud alerts, security freezes, and the steps you can take to protect yourself by contacting the consumer reporting agencies, the Federal Trade Commission, or your state Attorney General.
The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580, www.identitytheft.gov, 1-877-ID-THEFT (1-877-438-4338); TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. You can obtain further information on how to file such a complaint by way of the contact information listed above. You have the right to file a police report if you ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof that you have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and your state Attorney General.