University of Phoenix Data Breach
Last Updated on December 3, 2025
At A Glance
- What's Going On?
- Attorneys need to hear from people affected by the University of Phoenix data breach as they investigate whether a class action lawsuit can be filed.
- What You Can Do
- If you believe your information may have been compromised in the University of Phoenix data breach, fill out the form on this page to learn more about the investigation and how you can help.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the University of Phoenix breach.
University of Phoenix Data Breach: Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the University of Phoenix data breach.
As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the University of Phoenix data breach or otherwise believe they are affected.
University of Phoenix Security Incident: What Happened?
The University of Phoenix, a for-profit private university based in Arizona, has reported a data breach impacting the personal information of current and former students, employees, faculty members and suppliers.
According to a notice posted on the university’s website, the incident involved a previously unknown vulnerability in its Oracle eBusiness Suite (EBS) software. An investigation of the data breach, which was discovered on November 21, 2025, found that an unauthorized third party had exploited the software vulnerability and removed certain information stored within the university’s Oracle EBS environment.
The University of Phoenix data breach reportedly compromised individuals’ names, contact information, Social Security numbers, dates of birth and bank account and routing numbers.
The university’s parent company, Phoenix Education Partners, Inc., disclosed the data breach in a Form 8-K filing with the Securities and Exchange Commission (SEC) dated December 2, 2025. According to the report, the cyberattack was part of a broader campaign in which the same software vulnerability was used to steal data from multiple organizations and academic institutions, including Dartmouth College.
People whose information was involved in the data breach will receive written notification by mail, the report states.
What You Can Do After the University of Phoenix Data Breach
If your information was exposed in the University of Phoenix data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force University of Phoenix to ensure they take proper steps to protect the information they were entrusted with.
Affected by the University of Phoenix data breach? Fill out the form on this page today.
Take Action
If you believe your information was exposed in the University of Phoenix data breach, fill out the form on this page to get in touch with us.
An attorney or legal representative may then reach out to you to explain more about this investigation and ask you a few questions.
Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.
Published: December 3, 2025
Before commenting, please review our comment policy.
The information submitted on this page will be forwarded to Bryson Harris Suciu & DeMay PLLC who has sponsored this investigation.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
