3.5 Million Affected by University of Phoenix Data Breach

The University of Phoenix has admitted that millions of individuals were affected by a data breach linked to a recent Oracle E-Business Suite campaign, which security researchers attribute to the Cl0p ransomware group but is believed to have been carried out by a cluster of the FIN11 threat group. The breach has impacted nearly 3.5 million individuals, according to data provided to the Maine Attorney General’s Office.

The University said exfiltration occurred between 13 and 22 August 2025, and compromised information includes names, dates of birth, Social Security numbers and bank account and routing numbers, though no University of Phoenix data appears to have been leaked. The incident came to light after the university became aware of an EBS-related cybersecurity incident on 21 November 2025, one day after the cybercriminals named the institution as a victim of the campaign.

The University of Phoenix confirmed that it was targeted in the Oracle EBS campaign earlier in December, and multiple other universities have been named as victims in the same attack.