Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

University of Phoenix

Disclosed Dec 2, 20253,500,000 affectedConfirmed

Official notice

Clop Oracle EBS hack exposes 3.5M University of Phoenix records

University of Phoenix said Clop exploited the Oracle E-Business Suite zero-day in August 2025 to take names, contact details, birth dates, SSNs and bank account and routing numbers of students, staff and suppliers; it detected the breach on November 21 and later notified nearly 3.5 million people.

What is known

People affected3,500,000 (as reported by the organization)
DisclosedDec 2, 2025
DiscoveredNov 21, 2025
HappenedAug 13, 2025
AttackSupply chain
Data exposedNamesDates of birthSocial Security numbersFinancialAddressesPhone numbersEmailsPayment cards
SectorEducation · US
StatusConfirmed
Part ofOracle ebs (2025)

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: University of Phoenix
Official noticeatg.wa.gov
Washington Attorney General breach notice: University of Phoenix
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: University of Phoenix
Official noticejustice.oregon.gov
Oregon DOJ breach notice: University of Phoenix
Newsbleepingcomputer.com
University of Phoenix data breach impacts nearly 3.5 million individuals
Newsbleepingcomputer.com
University of Phoenix discloses data breach after Oracle hack
SEC filingsec.gov
Phoenix Education Partners Form 8-K Item 8.01
Official noticeoag.my.site.com
Texas Attorney General data security breach report BR-0004750: University of Phoenix
Official noticein.gov
Indiana Attorney General 2025 data breach report: University of Phoenix

Notices filed

TotalDec 2, 2025
Research3,500,000 people
Residents of CADec 21, 2025
California AGCount not stated
Residents of WADec 21, 2025
Washington AG64,796 people
Residents of ORDec 21, 2025
Oregon DOJ3,489,274 people
Residents of DEDec 22, 2025
Delaware DOJ7,810 people
Residents of TXDec 22, 2025
Texas AG304,393 people
Residents of INDec 22, 2025
Indiana AG56,568 people

Same campaign

The Estée Lauder CompaniesEstee Lauder notifies employees of HR data theft via Oracle EBS flawHackingRetailUSUnverifiedJul 20Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-daySupply chainHealthcareGBUnverifiedDec 5, 2025Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsSupply chain99K affectedEducationUSNov 24, 2025Cox EnterprisesOracle EBS zero-day breach exposes 9,479 Cox Enterprises peopleSupply chain9,479 affectedMediaUSNov 20, 2025LogitechSupply chain exposed internal documents.Supply chainTechCHNov 14, 2025Washington PostOracle EBS hack exposes Washington Post staff bank and SSN dataSupply chain9,720 affectedMediaUSNov 7, 2025GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employeesSupply chain10K affectedTechUSNov 7, 2025Envoy AirClop steals business data from American Airlines' Envoy via Oracle EBSSupply chainTransportUSUnverifiedOct 17, 2025Harvard UniversityHarvard alumni and donor data stolen in Oracle EBS and phishing attacksHacking851K accountsEducationUSOct 13, 2025OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensSupply chainTechUSOct 2, 2025

Other breaches at University of Phoenix

Breach, details not statedBreach notice filed with the Indiana AG, details not stated.27 affectedEducationUSDec 30, 2020
History of this record
source2026-09-25
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
data_types2026-09-25
["names","dob","ssn","financial","addresses","phone","emails"] to ["names","dob","ssn","financial","addresses","phone","emails","payment-card"]by backfillSource
campaign2026-09-25
empty to oracle-ebs-2025by seedSource
attack2026-09-25
hacking to supply-chainby seedSource
data_types2026-09-25
["names"] to ["names","dob","ssn","financial","addresses","phone","emails"]by seedSource
records2026-09-25
3489274 to 3500000by seedSource
disclosed2026-09-25
2025-12-21 to 2025-12-02by seedSource
summary2026-09-25
empty to University of Phoenix said Clop exploited the Oracle E-Business Suite zero-day in August 2025 to take names, contact details, birth dates, SSNs and bank account and routing numbers of students, staff and suppliers; it detected the breach onby seedSource
title2026-09-25
empty to Clop Oracle EBS hack exposes 3.5M University of Phoenix recordsby seedSource
data_types2026-09-25
[] to ["names"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 3489274by backfillSource
attack2026-09-25
unknown to hackingby backfillSource
discovered2026-09-25
empty to 2025-11-21by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about University of Phoenix