Great Hearts America Announces Third-Party Data Breach at Veeya | Console and Associates, P.C.

On March 29, 2024, Great Hearts America (“Great Hearts”) filed a notice with the Attorney General of Massachusetts after discovering that Veeya, a managed service provider used by Great Hearts, experienced a data breach. In this notice, Great Hearts explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names and Social Security numbers. Upon completing its investigation, Great Hearts began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Great Hearts America, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Great Hearts / Veeya data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting Great Hearts?

The Great Hearts / Veeya data breach was only recently announced, and more information is expected in the near future. However, Great Hearts’ filing with the Attorney General of Massachusetts provides some important information on what led up to the breach. According to this source, on October 14, 2023, Great Hearts learned that one of its vendors, Veeya, detected unusual activity within its IT network. At that time, Veeya was not aware that any Great Hearts data was compromised but notified Great Hearts nonetheless. Veeya also secured its systems and launched an investigation into the incident.

This investigation ultimately confirmed that confidential information provided to Veeya by Great Hearts was subject to unauthorized access.

On January 16, 2024, after learning that sensitive consumer data was accessible to an unauthorized party, Great Hearts reviewed the compromised files to determine what information was leaked and which consumers were impacted. Great Hearts completed this process on March 24, 2024. While the breached information varies depending on the individual, it may include your name and Social Security number.

On March 29, 2024, Great Hearts sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Great Hearts America

Founded in 2007, Great Hearts America is an education company based out of Phoenix, Arizona. Great Hearts operates public charter schools in Arizona, Texas, Louisiana, and Florida. The company also operates an online charter school. In total, Great Hearts serves 27,000 students. Great Hearts employs more than 1,164 people and generates approximately $98 million in annual revenue.