Education sector data breaches expose student records, Social Security numbers, financial aid information, grades, disciplinary records, and sometimes health records at K-12 schools, colleges, and universities. Because many affected individuals are minors, these breaches carry a heightened long-term identity theft risk that can go completely undetected for years, since a stolen child’s identity is rarely checked against credit reports until adulthood. Schools and universities are frequent ransomware targets due to often-limited cybersecurity budgets relative to the volume of sensitive data they store, including admissions records, financial aid applications, and staff payroll information. Parents, students, faculty, and staff can all be affected by a single incident at an educational institution. This page tracks confirmed data breaches at schools, colleges, and universities, including what data was exposed, which companies or institutions notified regulators, and what affected individuals and families can do next to monitor for identity theft and understand their legal rights.
Missouri Military Academy has notified regulators of a data breach that exposed Social Security numbers and health records, prompting concerns about identity theft and medical fraud for those affected.
Missouri Military Academy Data Breach Exposes Social Security Numbers and Health Records Read More »
Rectory School notified the Vermont Attorney General of a data breach that exposed Social Security numbers, prompting concerns about identity theft for those affected.
Rectory School Data Breach Exposes Social Security Numbers Read More »
A ransomware attack on Battle Creek Public Schools in Nebraska exposed student special-education records, discipline files, and staff health-spending claims. The ransomware group has claimed responsibility for the incident.
Battle Creek Public Schools Data Breach Exposes Student Records and Health Data Read More »
Moody Bible Institute of Chicago has notified regulators of a data breach that may have exposed personal information belonging to students, staff, or donors. Here’s what is known and what affected individuals should do next.
Moody Bible Institute of Chicago Data Breach Exposes Personal and Financial Information Read More »
Arizona State University was hit by a ransomware attack claimed by the threat group, raising concerns that student and employee data may have been accessed or stolen.
Arizona State University Data Breach Exposes Student and Employee Records Read More »
Dental Studies Institute notified the Vermont Attorney General of a data breach that exposed financial account codes and credit or debit card information belonging to affected individuals.
Dental Studies Institute Data Breach Exposes Financial Account and Card Information Read More »
University of St. Thomas-Houston notified the Vermont Attorney General that a data breach exposed Social Security numbers, financial account codes, credit and debit card information, and health records.
University of Dallas notified the Vermont Attorney General of a data breach that exposed Social Security numbers, putting affected individuals at risk of identity theft.
University of Dallas Data Breach Exposes Social Security Numbers Read More »
Strategic Education Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers and government ID numbers belonging to affected individuals.
Bozeman School District #7 notified the Vermont Attorney General of a data breach that compromised Social Security numbers, raising identity theft concerns for those affected.
Bozeman School District #7 Data Breach Exposes Social Security Numbers Read More »