
University of Phoenix exposes personal data of nearly 3.5 million individuals
University of Phoenix exposes personal data of nearly 3.5 million individuals
- The University of Phoenix reported a major data breach affecting about 3.5 million individuals.
- Sensitive personal data, including Social Security numbers and banking information, were compromised due to an Oracle E-Business Suite vulnerability.
- The university is offering free identity protection services to those affected by the breach.
Story
In the United States, the University of Phoenix disclosed a significant data breach that has compromised the personal and financial information of approximately 3.5 million individuals. This incident comes to light as the university filed notification letters with Maine's Attorney General, detailing the number of affected individuals, which totals 3,489,274. The breach was attributed to attackers exploiting a vulnerability in the Oracle E-Business Suite software platform, leading to unauthorized access to sensitive data, including Social Security numbers and banking information. In response to the breach, the university is taking proactive measures to assist those affected by offering free identity protection services. These services include a year of credit monitoring, dark web monitoring, and a refund policy worth up to $1 million for potential fraud losses incurred due to this incident. Affected individuals are required to use a specific redemption code provided in their notification letters in order to enroll for these services. These actions underscore the severity of the breach and the university's intent to mitigate its impact on those affected. The University of Phoenix incident is not an isolated event, as it aligns with a broader pattern of attacks associated with the Clop ransomware group, which has targeted other institutions, including Harvard University and the University of Pennsylvania. Due to the ongoing threat posed by this group, the U.S. Department of State is now offering a reward of up to $10 million for information linking Clop's operations to foreign governments. As such, the breach exposes the vulnerability of educational institutions to sophisticated cyberattacks, raising concerns about the security of sensitive data. In light of the severity of the breach, users are urged to take post-breach safety measures seriously. Current and former students or employees of the university are encouraged to stay vigilant, monitor their mail for the notification letters, and consider taking additional steps such as credit freezes to protect against identity theft. With the potential for years of private information to be exposed, the university's breach reflects a growing challenge in cybersecurity that affects millions of individuals nationwide.