Clop Ransomware Exposes 3.5 Million in University of Phoenix Breach
Data Breach Fallout at University of Phoenix
The University of Phoenix has revealed a troubling cybersecurity incident impacting nearly 3.49 million people. Among those affected are current and past students, faculty, staff, and suppliers. The breach was orchestrated by the Clop ransomware group, which accessed sensitive information by exploiting a vulnerability in Oracle’s E-Business Suite.
This breach initially occurred on August 13, 2025, but alarmingly, it went undetected until November 21. The hackers publicized the stolen data, bringing it to light. In response, the university has been notifying affected individuals and regulatory bodies, offering identity protection services and launching an investigation into how this breach occurred.
Significant Implications and Responses
Higher education entities are often prime targets for cybercriminals because of the wealth of information they manage. This breach underscores the risks tied to enterprise-level software vulnerabilities, with Oracle’s system at the center of this attack. The breach resulted in leaked personal data, exposing individuals to heightened risks of identity theft and financial wrongdoing.
- Exploited Vulnerability: The breach hinged on a zero-day vulnerability in Oracle’s E-Business Suite, previously linked to attacks on other prominent universities.
- Data Compromised: The stolen information includes names, Social Security numbers, and banking details, presenting significant identity theft risks.
- Delay in Detection: A troubling aspect was the three-month delay in detection, exposing flaws in the university’s cybersecurity defenses.
- Support Measures: Affected individuals are being offered credit monitoring, identity recovery services, and protection against fraud.
Stay informed by following trusted tech news sources to keep up with the latest on this developing story and similar cybersecurity issues.
Stay ahead in cybersecurity and tech innovations by subscribing to our newsletter for vital updates tailored for IT leaders.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more

