Education sector data breaches expose student records, Social Security numbers, financial aid information, grades, disciplinary records, and sometimes health records at K-12 schools, colleges, and universities. Because many affected individuals are minors, these breaches carry a heightened long-term identity theft risk that can go completely undetected for years, since a stolen child’s identity is rarely checked against credit reports until adulthood. Schools and universities are frequent ransomware targets due to often-limited cybersecurity budgets relative to the volume of sensitive data they store, including admissions records, financial aid applications, and staff payroll information. Parents, students, faculty, and staff can all be affected by a single incident at an educational institution. This page tracks confirmed data breaches at schools, colleges, and universities, including what data was exposed, which companies or institutions notified regulators, and what affected individuals and families can do next to monitor for identity theft and understand their legal rights.
A data breach at 360training’s Mortgage Educators and Compliance site exposed credit and debit card numbers and names for over 24,000 people across the United States.
360training Data Breach Exposes Credit and Debit Card Numbers Read More »
A dataset from Navigate360’s anonymous school tip system was exposed and shared publicly, revealing sensitive student reports, months before the company notified anyone affected.
Navigate360 Data Breach Exposes Student Tip Records and Personal Information Read More »
Infinite Campus, a widely used student information system, confirmed that an extortion campaign exposed school staff names, emails, phone numbers and support ticket data.
Infinite Campus Data Breach Exposes Names, Emails and Contact Information Read More »
CodeStepByStep, an online coding practice platform, suffered a data breach that exposed names, usernames and email addresses for more than 100,000 users after attackers published stolen records online.
CodeStepByStep Data Breach Exposes Names, Usernames and Email Addresses Read More »
Monmouth University confirmed a data breach after a ransomware group claimed to have stolen 16 terabytes of data, exposing Social Security numbers, financial accounts and medical information belonging to students and others.
Monmouth University Data Breach Exposes Social Security Numbers and Medical Records Read More »
Strayer University detected suspicious network activity in April 2026 and, after a forensic investigation, confirmed that files containing personal information had been accessed without authorization. Current and former students, employees, and faculty may be affected, with exposed data potentially including Social Security numbers, driver's license numbers, dates of birth, and financial and student records. Anyone