In September 2025, the University of the People experienced a data breach that exposed student records. Information about the breach was disclosed on underground forums by a known threat actor in the education sector. There is no official statement from the University of the People, and information comes from third-party alerts and these forums.
Over 517,000 student records were affected. Exposed data types include student IDs, full names, email addresses, phone numbers, dates of birth, and countries of origin. There is no confirmation that SSN, medical, or financial data was involved. The specific US states affected are not publicly specified, though the breach impacted US residents.
Details about data breaches can emerge over time, and notifications to affected individuals may be delayed.