Kaplan North America
Disclosed Mar 17, 20266 months ago1,403,060 affectedConfirmed
What is known
| People affected | 1,403,060 (as reported by the organization) |
|---|---|
| Disclosed | Mar 17, 2026 |
| Discovered | Nov 13, 2025 |
| Happened | Oct 30, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Social Security numbers, Government IDs |
| Sector | Education · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Kaplan North Americaoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Kaplan North Americaatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Kaplan North Americaattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Kaplan North Americajustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004916: Kaplan North Americaoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2026-03-17 Kaplan North America Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: Kaplan North Americain.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 17 | |
| Washington AGresidents of WA | Mar 17 | 18,885 |
| Delaware DOJresidents of DE | Mar 17 | 3,053 |
| Oregon DOJresidents of OR | Mar 17 | 1,400,000 |
| Vermont AGresidents of VT | Mar 17 | |
| Indiana AGresidents of IN | Mar 17 | 6,238 |
| Texas AGresidents of TX | Mar 18 | 173,676 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-03-17-kaplan-north-america-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","government-id"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 1403060 · backfill source
- 2026-09-25 · sector: other to education · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-11-13 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.