Skip to content

Nelson University

Disclosed Jun 15, 20263 months ago37,313 affectedConfirmed

Official notice

What is known

People affected37,313 (as reported by the organization)
DisclosedJun 15, 2026
DiscoveredApr 6, 2025
HappenedMar 21, 2025
AttackRansomware
Data exposedSocial Security numbers, Government IDs, Health, Payment cards, Financial, Names
SectorEducation · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Nelson Universityoag.ca.gov · Official notice
Washington Attorney General breach notice: Nelson Universityatg.wa.gov · Official notice
Texas Attorney General data security breach report BR-0005120: Nelson Universityoag.my.site.com · Official notice
Vermont Attorney General breach report: Nelson Universityago.vermont.gov · Official notice
Indiana Attorney General 2026 data breach report: Nelson Universityin.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAJun 15
Washington AGresidents of WAJun 15508
Vermont AGresidents of VTJun 159
Indiana AGresidents of INJun 15295
Texas AGresidents of TXJun 1821,905
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
  • 2026-09-25 · data_types: [] to ["ssn","government-id","health","payment-card","financial","names"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 37313 · backfill source
  • 2026-09-25 · attack: unknown to ransomware · backfill source
  • 2026-09-25 · discovered: empty to 2025-04-06 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Nelson University

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.