Nelson University

Nelson University notified the New Hampshire Attorney General on June 23, 2026, of a ransomware incident affecting 34 NH residents. Unauthorized access occurred between March 21, 2025, and April 6, 2025. Personal information, including names, SSNs/TINs, and federal IDs, was potentially accessed. The university engaged forensic specialists, contained the threat, and offered one year of credit monitoring to affected individuals.

Nelson University based in Waxahachie, Texas, a educational institution entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-05-26 and reported on 2026-06-18. 21,905 Texas residents were affected. 37,313 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information. Consumers were notified via U.S. Mail.

Nelson University reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-06-15. The reporting organization type is Educational. 9 Vermont residents were affected. Categories of data breached: Social Security Numbers.

Nelson University reported a data breach to the Indiana Attorney General. The breach occurred on 2025-03-21 and was reported on 2026-06-15. 295 Indiana residents were affected. 37,313 individuals affected in total.

Nelson University reported a data breach to the California Attorney General. The incident occurred between March 21, 2025, and April 6, 2025. The breach involved personal information including Social Security numbers, names, addresses, and dates of birth. The university established a toll-free response line for affected individuals. No specific attack vector or number of affected individuals was disclosed in the provided documents.

Nelson University filed a breach notification with the Massachusetts Attorney General's office (Case 2026-981). The notification provides instructions to affected individuals on placing credit freezes, obtaining free credit reports, and enrolling in a credit monitoring service. The document implies unauthorized access to personal data including Social Security numbers and names, but does not specify the attack vector, scope, or date of the incident.