The University of Phoenix, Inc.
bd_4f43b0b314a5713f · schema v1 · pii pii-v1
Full breach record for The University of Phoenix, Inc. →Phoenix Education Partners, Inc. (via subsidiary The University of Phoenix, Inc.) disclosed a cybersecurity incident involving the Oracle E-Business Suite (EBS). An unauthorized third party exploited a previously unknown vulnerability in Oracle EBS in August 2025 to exfiltrate data. The Company detected the incident on November 21, 2025, applied patches in October 2025, and engaged third-party cybersecurity firms. Affected data includes names, contact info, dates of birth, SSNs, and bank account/routing numbers. The investigation is ongoing.
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_07f2680cb5c0bb72Oregon State AGfiled 2025-12-21(19d gap)Verified
- bd_296734ddcf83ab6aIowa State AGfiled 2025-12-21(19d gap)Verified
- bd_2a49899925132de7California State AGfiled 2025-12-21(19d gap)Verified
- bd_dc51c3e1baef7969Washington State AGfiled 2025-12-21(19d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 20d gap
- bd_fa3d3b455f65bfaaMaine State AGfiled 2025-12-21(19d gap)Verified
- bd_3d18365ebdc6078fIndiana State AGfiled 2025-12-22(20d gap)Verified
- bd_5c3c3d94680bea80Texas State AGfiled 2025-12-22(20d gap)Verified
- bd_76c4b059c21b7a70Delaware State AGfiled 2025-12-22(20d gap)Verified
- bd_b8bb5487f6611341South Carolina State AGfiled 2025-12-22(20d gap)Verified
- bd_fac6b9ef2dd646f4New Hampshire State AGfiled 2025-12-22(20d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1600222/000095014225003098/eh250711375_8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Dec 2, 2025
- Raw hash
- 1b404ebe59388af97f38a6b41785dd44d12096182ae5449dd9138a0ecb7300fb
Source filing
Reporting entity
- Name
- Phoenix Education Partners, Inc.norm: phoenix education
- SEC CIK
- 0001600222
Victim entity
- Name
- The University of Phoenix, Inc.norm: the university of phoenix
Incident
- Discovered
- Nov 21, 2025
- Materiality determined
- Dec 2, 2025
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 days(11 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Dec 2, 2025→ Filed: Dec 2, 20250d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.