New York University experienced a data breach that affected over 3 million applicants. The breach occurred on October 20, 2024, and was subsequently reported to the California Attorney General, with notification to consumers on June 9, 2025. This incident was described as involving admissions and application data.
Exposed data types included test scores, financial aid records, zip codes, academic credentials, demographic data, family information, and Common Application materials. Later reports also indicated that some files contained names and Social Security numbers. The number of affected individuals is more than 3 million applicants.
Details surrounding the incident and its full scope may continue to emerge.