Under the Massachusetts Data Security Law (201 CMR 17.00), Instructure was legally required to notify you of this breach. The letter should specify which of your data was involved — commonly Name, Date of Birth, Student ID. This notification was issued recently, which means you are still within the optimal window to explore legal options.
"Instructure was required by law to send this letter. That same law gives you the right to seek compensation — something the letter itself does not mention."
Instructure was legally required to send this letter under MA data breach notification law. The number of affected individuals was not publicly disclosed in the AG filing.
This is not spam. It is a formal legal disclosure, and it may entitle you to compensation.
Used in combination with other data for identity theft.
Key identity verification data used to open accounts in your name.
This information was part of the compromised data.
Home address exposed — increases risk of physical mail fraud and identity theft.
This information was part of the compromised data.
This information was part of the compromised data.
This information was part of the compromised data.
What They're Offering
What They're Not Telling You
Read the letter carefully
Note the date of the breach, the exact data types listed, and the offer (if any) of credit monitoring services. Keep the original letter — it may be evidence.
Monitor your accounts closely
Set up transaction alerts on all financial accounts. Review recent statements for charges you do not recognize.
Change any related passwords
If your login credentials were exposed, change that password everywhere you have used it. Enable two-factor authentication on critical accounts.
Consult a data breach attorney
You may be entitled to compensation beyond what the company's offer covers. An attorney can evaluate your specific situation at no charge — the consultation is free and there is no fee unless compensation is recovered.
This letter may be the beginning of a legal claim. Affected individuals have recovered:
Class action lawsuits allow groups of affected individuals to pursue claims collectively, increasing leverage and reducing the burden on any one person. There is no cost to you to have an attorney review your case — fees are only collected if there is a recovery.
You May Be Eligible for Compensation
The breach happened. Your next step costs nothing.
Instructure was required by law to notify you. That notice may be your ticket to financial compensation through a class action. Our attorneys review every case for free — no fee unless there is a recovery.
Instructure breach?
Free case review · No fee unless you win