The University of Phoenix, Inc.

University of Phoenix, Inc. notified the New Hampshire Attorney General of a data security incident involving an Oracle E-Business Suite vulnerability. Unauthorized access occurred between August 13 and 22, 2025, when an attacker exploited a previously unknown vulnerability to exfiltrate data. The incident affected approximately 6,661 New Hampshire residents, exposing names, dates of birth, Social Security numbers, and bank account/routing numbers. Notifications to affected individuals began on December 22, 2025, offering credit monitoring and identity protection services.