Bastyr University experienced a data breach that occurred on April 23, 2025. The university officially notified the Indiana Attorney General on September 17, 2025, and also sent notification letters to affected consumers.
The breach affected 3,551 individuals, primarily in Indiana. The specific types of data exposed have not been publicly detailed, and it remains unclear if sensitive information such as SSN, financial data, or medical data was involved. The university operates in the higher education sector, offering programs like the Doctor of Naturopathic Medicine. It has not been publicly confirmed whether Bastyr University is publicly traded or what its revenue estimate is, and whether the breach was a result of a third-party vendor compromise.
More details may emerge as investigations continue, and consumers receiving notification should remain vigilant.