What is the Brigham Young University (BYU) data breach?

Brigham Young University (BYU) in Provo, Utah, experienced a data breach that exposed sensitive personal information of individuals affiliated with the university. An unauthorized actor gained access to files stored on BYU's servers, compromising names and Social Security numbers of university-affiliated individuals.

When did the BYU data breach occur?

The BYU data breach incident occurred between April 25, 2025, and April 27, 2025, when an unauthorized actor gained access to files stored on the university's servers. The university began notifying affected individuals nearly three months later on July 23, 2025.

What information was compromised in the BYU breach?

The compromised information includes names of individuals affiliated with BYU and Social Security numbers (SSNs). The university is providing affected individuals with a list of specific types of sensitive information that may have been compromised in their individual cases.

How many people were affected by the BYU data breach?

The number of affected individuals has not been disclosed by BYU. The university has only confirmed that the breach affected individuals affiliated with the university, but has not provided specific numbers of impacted persons.

What type of cyberattack hit BYU?

The nature of the attack has not been disclosed by BYU. The university has only confirmed that an unauthorized actor gained access to files stored on their servers, but has not specified whether it was ransomware, hacking, malware, or another type of cyber incident.

When did BYU notify affected individuals about the breach?

BYU began mailing data breach notification letters to impacted individuals on July 23, 2025, nearly three months after the incident occurred in late April 2025. This significant delay has drawn criticism for potentially violating state and federal privacy laws.

What is BYU doing to help affected individuals?

BYU is providing affected individuals with a list of specific types of sensitive information that may have been compromised and offering complimentary credit monitoring services. The university has also reported the incident to the appropriate authorities.

Why is the BYU breach response being criticized?

The incident has drawn criticism for the significant delay between the breach occurrence (April 25-27, 2025) and notification of affected individuals (July 23, 2025). This nearly three-month delay potentially violates state and federal privacy laws that typically require timely notification of data breaches.

Has BYU reported the breach to authorities?

Yes, BYU has reported the incident to the appropriate authorities as required by data breach notification laws. However, the university has not disclosed specific details about which agencies were notified or when the reports were filed.

Incident

Brigham Young University reports data breach

published: July 26, 2025

Learn More

Brigham Young University (BYU) in Provo, Utah, is reporting a data breach that exposed sensitive personal information of individuals affiliated with the university.

The incident occurred between April 25, 2025, and April 27, 2025, when an unauthorized actor gained access to files stored on BYU's servers. The compromised information includes:

Names of individuals affiliated with BYU
Social Security numbers (SSNs)

The nature of the attack and the number of affected individuals are not disclosed by BYU.

BYU began mailing data breach notification letters to impacted individuals on July 23, 2025, and is providing affected individuals with a list of specific types of sensitive information that may have been compromised, along with complimentary credit monitoring services. The university has reported the incident to the authorities.

The incident has drawn criticism for the delay between the breach occurrence and notification of affected individuals, potentially violating state and federal privacy laws.

Brigham Young University reports data breach

Read More
Bunker Hill Community College reports ransomware attack
Birmingham school email error exposes student data
Melbourne Catholic College hit by ransomware attack exposing …
The Harrison County Board of Education reports cyberattack, …
State University of New York campuses reports MOVEit …