In July 2025, BYU-Pathway Worldwide reported a data breach that began on June 17, 2025, through unauthorized access to a compromised vendor account. The company detected the breach on June 24, 2025, and subsequently sent notices to affected individuals.
The breach exposed various types of personal information, including names, Social Security numbers, national ID numbers, account IDs, contact details, gender, marital status, religious affiliation, age, and educational course records. The exact number of affected individuals has not been publicly provided.
Data breaches often involve a period of discovery and notification. It is not uncommon for details to emerge over time, and notification to affected individuals may be delayed.