LEE UNIVERSITY
ent_019dea4a55f27b2d583d8c31259c59bf
Disclosures
15
State AG · Leak Site · 14 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
136,928
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- LEE UNIVERSITY
- Normalized
- lee university— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300KBJ93WKI4N2H90
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (15)newest first
- Maryland State AGas victim2026-04-23
Lee University, a private Christian university in Tennessee, notified the Maryland Attorney General of a data security incident discovered on March 22, 2024. Unauthorized access resulted in the potential exposure of personal information for approximately 1,623 Maryland residents, including names, SSNs, driver's licenses, passport numbers, financial account numbers, and health information. Notifications were sent to affected individuals on March 24, 2025, offering 12 months of identity protection services.
- South Carolina State AGas victim2025-03-31
Lee University notified South Carolina residents of a March 2024 security incident involving a third-party software vulnerability. The breach potentially exposed personal information including names and government IDs. The university engaged cybersecurity experts, contained the incident, and offered IDX identity protection services to affected individuals.
- Massachusetts State AGas victim2025-03-26
Lee University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-26. 408 Massachusetts residents were affected.
- Maine State AGas victim2025-03-26
Lee University reported a security incident occurring on March 9, 2024, involving unauthorized access via a third-party software vulnerability. The breach was discovered on March 19, 2025, and affected 136,928 individuals nationwide, including 275 Maine residents. Data potentially downloaded included names and government identifiers. The university engaged cybersecurity experts and offered 12 months of identity protection services.
- Washington State AGas victim2025-03-26
Lee University, a private Christian university in Tennessee, disclosed a ransomware incident affecting 1,167 Washington residents. The breach involved unauthorized access via a third-party software vulnerability, resulting in data exfiltration and encryption. Affected data included names, SSNs, driver's licenses, financial account numbers, and health information. Notifications were sent in March 2025, offering 12 months of identity protection.
- Washington State AGas victim2025-03-26
Lee University, a private Christian university in Tennessee, disclosed a ransomware incident affecting approximately 1,167 Washington residents. The breach involved unauthorized access to personal information including SSNs, driver's licenses, financial account numbers, and health data. The incident was discovered on March 22, 2024, following access via a third-party software vulnerability. Notifications were sent to affected individuals on March 24, 2025, offering 12 months of identity protection services.
- California State AGas victim2025-03-26
In March 2024, Lee University experienced a security incident involving a third-party software vulnerability that allowed unauthorized access to university systems and potential downloading of university data. A comprehensive data review concluded in March 2025. Notification letters were sent to affected individuals on March 24, 2025, offering IDX identity protection services. The incident involved PII of an unspecified number of individuals.
- New Hampshire State AGas victim2025-03-25
Lee University notified the New Hampshire Attorney General of a data security incident discovered in March 2024 involving a third-party software vulnerability. The breach may have exposed personal information, including SSNs, of approximately 139 New Hampshire residents (students, donors, and employees). Lee University engaged cybersecurity experts, contained the incident, and offered identity theft protection services to affected individuals.
- Montana State AGas victim2025-03-25
Lee University notified Montana residents of a March 2024 data breach caused by a third-party software vulnerability. The incident resulted in the unauthorized download of personal information, including names and government IDs. The university engaged cybersecurity experts, contained the breach, and offered 12-24 months of identity theft protection services to affected individuals.
- Oregon State AGas victim2025-03-25
Lee University reported a data breach to the Oregon Attorney General. The breach was reported on 2025-03-25. The breach occurred during 3/9/2024 - 3/22/2024. The breach was discovered on 3/19/2025. 136,928 individuals were affected. Notice was sent on 3/24/2025.
- Vermont State AGas victim2025-03-24
Lee University experienced a security incident in March 2024 involving a third-party software vulnerability that impacted local systems. An investigation revealed that some university data may have been downloaded. The incident was contained, and a comprehensive data review concluded in March 2025. Affected individuals are being offered identity theft protection services.
- Nebraska State AGas victim2025-03-24
Lee University notified Nebraska residents of a March 2024 security incident involving a third-party software vulnerability. The breach resulted in the potential exfiltration of personal information, including names and government identifiers. The university engaged cybersecurity experts, contained the incident, and offered identity theft protection services to affected individuals. Notices were sent in March 2025.
- Indiana State AGas victim2025-03-24
Lee University reported a data breach to the Indiana Attorney General. The breach occurred on 2024-03-09 and was reported on 2025-03-24. 1,768 Indiana residents were affected. 136,928 individuals affected in total.
- Illinois State AGas victim2025-03-01
LEE UNIVERSITY filed a data-breach notice with the Illinois Attorney General in March 2025 (case 25-03-042). The register records the breach as discovered on March 22, 2025. Personal information types reported: drivers license, financial account number, medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2024-04-17
Lee University is a private, comprehensive university that was founded in 1918 in Cleveland, Tennessee. The number of students enrolled is more than 4,000 people. Lee University corporate office is located in 1120 N Ocoee St, Cleveland, Tennessee, 37311, United States and has 1,223 employees. The total amount of data leakage is 387.49 GB