HackingEducationEducationVulnerability ExploitZero-DayData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Moody Bible Institute

bd_405e8ccfc5631c0f · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 12, 2026

Filed

Jul 31, 2026

To disclose

7 weeks

Affected

2,200state residents only

Linked

11 filings

Confidence

66%

Full breach record for Moody Bible Institute →

The Moody Bible Institute of Chicago reported a data breach affecting 2,200 Iowa residents. Unauthorized access occurred on June 12, 2026, via a zero-day software vulnerability. Exfiltrated data included names, DOBs, SSNs, driver's license numbers, and financial aid information. Notifications were sent on July 31, 2026, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 7 weeks / 49 days

Jun 12, 2026

Begins

Jun 12, 2026

Discovered

Jul 31, 2026

Filed

This filing is one of 11 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_5da301845287c8d42026-07-31Verified
Indiana State AGbd_7404c0eaf1d039ae2026-07-31Verified
Nebraska State AGbd_a598467ebd8ae58f2026-07-31Verified
New Hampshire State AGbd_c2ab40531b9b14fd2026-07-31Verified

Show 6 more filings ↓up to 30d gap

Oregon State AGbd_e244e2b520607db92026-07-31Verified
South Carolina State AGbd_f2381e94235e5ccc2026-07-31Verified
Texas State AGbd_869fed66908e1d302026-08-04 · +4dVerified
California State AGbd_3972d2d51525b0d42026-07-23 · +8dCandidate
Washington State AGbd_3fe355bb5d1cbfdc2026-07-23 · +8dVerified
Illinois State AGbd_fd1f4479ec8728d32026-07-01 · +30dVerified

Name: Polsinelli (Michael J. Waters)
norm: polsinelli
Domain: moodybible.org

Name: Moody Bible Institute
norm: moody bible institute
Domain: moodybible.org
Industry: Educationllm

Discovered: Jun 12, 2026
Breach occurred: Jun 12, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 31, 2026
Affected individuals: 2,200state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified law enforcement
Initial access: exploit_public_facing

During the incident: Took steps to secure its systems
Notified law enforcement
Engaged a forensic security firm, through counsel, to assist with the investigation and confirm the security of its systems
Changed and strengthened passwords
Implemented new technical safeguards to reduce the likelihood of a similar event
Notifying involved individuals
Offering complimentary credit monitoring services through Kroll
Changes made: Patched the vulnerability
Taken additional steps to reduce the risk of this type of incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Illinois State AGJul 1 · first

California State AG+22d

Washington State AG+22d

Massachusetts State AG+30d

Indiana State AG+30d

Nebraska State AG+30d

New Hampshire State AG+30d

Oregon State AG+30d

South Carolina State AG+30d

Iowa State AG+30d · this page

Texas State AG+34d

Pattern: first filing Jul 1 (IL), last Aug 4 (TX) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/7312026_The_Moody_Bible_Institute_o_3206833D34315.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2026
Raw hash: 6c7f2f4b141cfa7eac309121c2a9fb59d0bcc07af04f6a0d2ce5e9508e124418

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityPolsinelli (Michael J. Waters)

Victim entityMoody Bible Institute

Incidentdiscovered Jun 12, 2026

Stated responseTook steps to secure its systems

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov