A significant cybersecurity incident involving the University of Phoenix has compromised the personal information of 64,161 South Carolina residents. The breach, which stems from a vulnerability in the university’s software systems, has exposed sensitive data including names and Social Security numbers.
Nationally, the breach has reportedly affected approximately 3.5 million individuals, including current and former students, faculty, employees, and suppliers.
The University of Phoenix discovered the incident on November 21, 2025. Following an investigation with third-party cybersecurity firms, the university determined that an unauthorized third party exploited a previously unknown vulnerability in the Oracle E-Business Suite (Oracle EBS).
More Info