cyber
confidence high
sentiment negative
materiality 0.70
Phoenix Education Partners reports cybersecurity incident; personal data of numerous individuals accessed
Phoenix Education Partners, Inc.
- Incident detected Nov 21, 2025; unauthorized access occurred in August 2025 via Oracle EBS vulnerability.
- Exfiltrated data includes names, SSNs, bank account numbers, and contact info for numerous individuals.
- Company installed Oracle patches in October 2025; no impact on business operations or student programming.
- Investigation ongoing; cybersecurity insurance covers costs subject to deductibles, exclusions, and limits.
- No public dissemination of data identified; notifications to affected parties and regulators to follow.