University of Phoenix
Data Breach Class Action Lawsuit
Posted: December 23, 2025 -- University of Phoenix data breach class action lawsuit investigation.
Abington Cole + Ellery is investigating the data breach recently announced by University of Phoenix and may be filing a class action lawsuit on behalf of victims.
University of Phoenix Data Breach Summary:
In mid-December 2025, University of Phoenix disclosed a security incident involving unauthorized access to sensitive data, which took place or around between August 13 and August 22, 2025. Approximately 3.4 million individuals were affected by the University of Phoenix data breach, and breached data may include, but is not necessarily limited to: names, dates of birth, Social Security numbers, and bank account and routing numbers. As a result of the data breach, University of Phoenix is offering 12 months of free credit monitoring and/or identity theft protection services to affected individuals.
FREE CONSULTATION: If you are a victim of the University of Phoenix data breach, and interested in potentially volunteering to serve as a class representative in a class action lawsuit against University of Phoenix, please submit your information here to be considered:
An attorney-client relationship is not formed by submitting information through this website.
University of Phoenix Data Breach Details:
The University of Phoenix recently disclosed a large data breach that exploited previously unknown vulnerabilities in Oracle’s E-Business Suite (EBS) software. Attackers are believed to have accessed the university’s Oracle EBS financial and administrative environment in mid-August 2025, with data exfiltration taking place between August 13 and August 22. The university says it only detected signs of a cybersecurity incident on November 21, 2025, prompting an internal investigation and regulatory notifications.
According to breach notices filed with regulators, the incident affected roughly 3.5 million individuals, including current and former students, employees, faculty, and suppliers. The compromised information varies by person but can include names and contact details, dates of birth, Social Security numbers, and bank account and routing numbers, along with other records held in the Oracle EBS environment; the university has said that banking credentials such as online login details were not involved.
In response, the university has restricted affected systems, enhanced security, notified law enforcement, and engaged third-party cybersecurity specialists to investigate the scope and cause of the breach. It has begun mailing notification letters dated December 22, 2025, to affected individuals and regulators, and is offering complimentary identity protection services that include credit monitoring, dark-web monitoring, identity theft recovery assistance, and a fraud reimbursement policy. The breach appears one of many tied to the Oracle EBS zero-day campaign against universities and large enterprises, and legal and regulatory scrutiny is ongoing.
Additional information about the University of Phoenix data breach may be found here: University of Phoenix Data Breach Notification (Maine). The University of Phoenix Website may also have additional information about or provide periodic updates regarding the data breach.
About University of Phoenix:
The University of Phoenix is a private, for-profit university headquartered in Phoenix, Arizona, that primarily serves working adult and nontraditional students through online programs. Founded in 1976, it offers a wide range of certificate, associate, bachelor’s, master’s, and doctoral degree programs across fields such as business, education, healthcare, technology, and the social sciences. The institution is accredited by the Higher Learning Commission and enrolls tens of thousands of students, many of whom study online while employed.
Additional Information:
BleepingComputer – “University of Phoenix data breach impacts nearly 3.5 million individuals”
Cybersecurity News – “University of Phoenix Data Breach – 3.5 Million+ Individuals Affected”
CyberPress – “University of Phoenix Data Breach Exposes Information of Over 3.5 Million Individuals”
SecurityWeek – “3.5 Million Affected by University of Phoenix Data Breach”
For more information about steps you can take to possibly reduce the chances harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach?
If you believe you are a victim of the University of Phoenix data breach, and if you would like to volunteer to serve as a class representative in a class action lawsuit regarding this data breach, please submit your information via the form on this webpage. This website is not associated with nor authorized by University of Phoenix or any affiliated companies. If you have received any other data breach notifications, you may to review Abington Cole + Ellery's current list of data breach investigations.