HackingEducationEducationVulnerability ExploitData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Moody Bible Institute

bd_a598467ebd8ae58f · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 12, 2026

Filed

Jul 31, 2026

To disclose

—

Affected

Not disclosed

Linked

10 filings

Confidence

66%

Full breach record for Moody Bible Institute →

The Moody Bible Institute of Chicago notified affected individuals of a data breach discovered on June 12, 2026. Unauthorized access was gained via a vulnerability in software commonly used by educational institutions. The incident involved the illegal acquisition of personal information. The Institute patched the vulnerability, engaged forensic investigators, notified law enforcement, and offered one year of complimentary Kroll 3B Identity Monitoring Services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 12, 2026

Begins

Jun 12, 2026

Discovered

Jul 31, 2026

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Iowa State AGbd_405e8ccfc5631c0f2026-07-31Verified
Massachusetts State AGbd_5da301845287c8d42026-07-31Verified
New Hampshire State AGbd_c2ab40531b9b14fd2026-07-31Verified
Oregon State AGbd_e244e2b520607db92026-07-31Verified

Show 5 more filings ↓up to 30d gap

South Carolina State AGbd_f2381e94235e5ccc2026-07-31Verified
Texas State AGbd_869fed66908e1d302026-08-04 · +4dVerified
California State AGbd_3972d2d51525b0d42026-07-23 · +8dCandidate
Washington State AGbd_3fe355bb5d1cbfdc2026-07-23 · +8dVerified
Illinois State AGbd_fd1f4479ec8728d32026-07-01 · +30dVerified

Name: Moody Bible Institute
norm: moody bible institute
Domain: moodybible.org

Name: Moody Bible Institute
norm: moody bible institute
Domain: moodybible.org
Industry: Educationllm

Discovered: Jun 12, 2026
Breach occurred: Jun 12, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 23, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: notified law enforcement
Initial access: exploit_public_facing

During the incident: Began an internal review
Took steps to secure our systems
Notified law enforcement
Engaged a forensic security firm to review what took place and confirm the security of our computer systems
Patched the vulnerability
Taken additional steps to reduce the risk of this type of incident occurring in the future
Offering a complimentary one-year membership of Kroll 3B Identity Monitoring Services
Changes made: Patched the vulnerability
Taken additional steps to reduce the risk of this type of incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGJul 1 · first

California State AG+22d

Washington State AG+22d

Iowa State AG+30d

Massachusetts State AG+30d

New Hampshire State AG+30d

Oregon State AG+30d

South Carolina State AG+30d

Nebraska State AG+30d · this page

Texas State AG+34d

Pattern: first filing Jul 1 (IL), last Aug 4 (TX) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/f3b8a8ec-891f-469f-b1b8-46ef018eeb05.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2026
Raw hash: 0c3007ca52d5902665392de04baf8c88893f1c4416b3608cfdb9eaa0a69a6ca2

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityMoody Bible Institute

Victim entityMoody Bible Institute

Incidentdiscovered Jun 12, 2026

Stated responseBegan an internal review

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov