HackingEducationEducationVulnerability ExploitData ExfiltratedIdentity (basic)Government IDHighContained

Moody Bible Institute

bd_3fe355bb5d1cbfdc · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 12, 2026

Filed

Jul 23, 2026

To disclose

6 weeks

Affected

8,955state residents only

Linked

10 filings

Confidence

66%

Full breach record for Moody Bible Institute →

The Moody Bible Institute of Chicago notified Washington AG on July 23, 2026, of a breach discovered June 12, 2026. An attacker exploited a software vulnerability to illegally acquire personal information (names) from the Institute's systems. The Institute patched the vulnerability, engaged forensic investigators, notified law enforcement, and offered one year of Kroll 3B Identity Monitoring Services to affected individuals.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 6 weeks / 41 days

Jun 12, 2026

Begins

Jun 12, 2026

Discovered

Jul 23, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_3972d2d51525b0d42026-07-23Candidate
Iowa State AGbd_405e8ccfc5631c0f2026-07-31 · +8dVerified
Massachusetts State AGbd_5da301845287c8d42026-07-31 · +8dVerified
Nebraska State AGbd_a598467ebd8ae58f2026-07-31 · +8dVerified

Show 5 more filings ↓up to 22d gap

New Hampshire State AGbd_c2ab40531b9b14fd2026-07-31 · +8dVerified
Oregon State AGbd_e244e2b520607db92026-07-31 · +8dVerified
South Carolina State AGbd_f2381e94235e5ccc2026-07-31 · +8dVerified
Texas State AGbd_869fed66908e1d302026-08-04 · +12dVerified
Illinois State AGbd_fd1f4479ec8728d32026-07-01 · +22dVerified

Name: Moody Bible Institute
norm: moody bible institute
Domain: moodybible.org

Name: Moody Bible Institute
norm: moody bible institute
Domain: moodybible.org
Industry: Educationllm

Discovered: Jun 12, 2026
Breach occurred: Jun 12, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 23, 2026
Affected individuals: 8,955state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: notified law enforcement
Initial access: exploit_public_facing

During the incident: Began an internal review
Took steps to secure our systems
Notified law enforcement
Engaged a forensic security firm to review what took place and confirm the security of our computer systems
Patched the vulnerability
Taken additional steps to reduce the risk of this type of incident occurring in the future
Offering a complimentary one-year membership of Kroll 3B Identity Monitoring Services
Changes made: Patched the vulnerability
Taken additional steps to reduce the risk of this type of incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGJul 1 · first

California State AG+22d

Washington State AG+22d · this page

Iowa State AG+30d

Massachusetts State AG+30d

Nebraska State AG+30d

New Hampshire State AG+30d

Oregon State AG+30d

South Carolina State AG+30d

Texas State AG+34d

Pattern: first filing Jul 1 (IL), last Aug 4 (TX) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA41947.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 23, 2026
Raw hash: 02e38bd624cc25d0ed41c46ba38faed2546bbcc94602eebc13b395367aab0c05

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityMoody Bible Institute

Victim entityMoody Bible Institute

Incidentdiscovered Jun 12, 2026

Stated responseBegan an internal review

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com