HackingEducationEducationVulnerability ExploitZero-DayData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Moody Bible Institute

bd_405e8ccfc5631c0f · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 12, 2026

Filed

Jul 31, 2026

To disclose

7 weeks

Affected

2,200state residents only

Linked

10 filings

Confidence

66%

Full breach record for Moody Bible Institute →

The Moody Bible Institute of Chicago reported a data breach affecting 2,200 Iowa residents. Unauthorized access occurred on June 12, 2026, via a zero-day software vulnerability. Exfiltrated data included names, DOBs, SSNs, driver's license numbers, and financial aid information. Notifications were sent on July 31, 2026, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 7 weeks / 49 days

Jun 12, 2026

Begins

Jun 12, 2026

Discovered

Jul 31, 2026

Filed

vs. sector median

2 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Massachusetts State AGbd_5da301845287c8d42026-07-31Verified
Nebraska State AGbd_a598467ebd8ae58f2026-07-31Verified
New Hampshire State AGbd_c2ab40531b9b14fd2026-07-31Verified
Oregon State AGbd_e244e2b520607db92026-07-31Verified

Show 5 more filings ↓up to 30d gap

South Carolina State AGbd_f2381e94235e5ccc2026-07-31Verified
Texas State AGbd_869fed66908e1d302026-08-04 · +4dVerified
California State AGbd_3972d2d51525b0d42026-07-23 · +8dCandidate
Washington State AGbd_3fe355bb5d1cbfdc2026-07-23 · +8dVerified
Illinois State AGbd_fd1f4479ec8728d32026-07-01 · +30dVerified

Name: Polsinelli (Michael J. Waters)
norm: polsinelli
Domain: moodybible.org

Name: Moody Bible Institute
norm: moody bible institute
Domain: moodybible.org
Industry: Educationllm

Discovered: Jun 12, 2026
Breach occurred: Jun 12, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 31, 2026
Affected individuals: 2,200state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified law enforcement
Initial access: exploit_public_facing

During the incident: Took steps to secure its systems
Notified law enforcement
Engaged a forensic security firm, through counsel, to assist with the investigation and confirm the security of its systems
Changed and strengthened passwords
Implemented new technical safeguards to reduce the likelihood of a similar event
Notifying involved individuals
Offering complimentary credit monitoring services through Kroll
Changes made: Patched the vulnerability
Taken additional steps to reduce the risk of this type of incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGJul 1 · first

California State AG+22d

Washington State AG+22d

Massachusetts State AG+30d

Nebraska State AG+30d

New Hampshire State AG+30d

Oregon State AG+30d

South Carolina State AG+30d

Iowa State AG+30d · this page

Texas State AG+34d

Pattern: first filing Jul 1 (IL), last Aug 4 (TX) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/7312026_The_Moody_Bible_Institute_o_3206833D34315.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2026
Raw hash: 6c7f2f4b141cfa7eac309121c2a9fb59d0bcc07af04f6a0d2ce5e9508e124418

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityPolsinelli (Michael J. Waters)

Victim entityMoody Bible Institute

Incidentdiscovered Jun 12, 2026

Stated responseTook steps to secure its systems

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov