1 of 1
Story summary
- The University of Phoenix confirmed a data breach affecting about 3.5 million individuals, including students and staff.
- The breach stemmed from a zero-day vulnerability in Oracle E-Business Suite and was detected on November 21, 2025 after attackers listed the university on a leak site.
- Exposed data include names, contact details, Social Security numbers, and bank information, prompting the university to offer free identity protection to affected individuals.
