Bleepingcomputer

University of Phoenix Data Breach Affects 3.5 Million Individuals

First seen 22 Dec 2025, 15:59 UTC • Bleepingcomputer

•49.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Clop ransomware gang breached the University of Phoenix's network in August 2025, compromising the data of nearly 3.5 million students, staff, and suppliers. The university disclosed the breach on its official website in December 2025, while its parent company, Phoenix Education Partners, filed an 8-K form with the U.S. Securities and Exchange Commission.

How this analysis works

Attack Flow

23 entities, 24 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Phishing
Ransomware

Campaign (2)

Clop Data Theft Campaign
CLOP Extortion Campaign

Organization (13)

Envoy Air
GlobalLogic
Harvard University
Logitech
Phoenix Education Partners
Princeton University
The Washington Post
University of Pennsylvania
University Of Phoenix
Education
Accellion FTA
GoAnywhere MFT
MOVEit Transfer

Vulnerability (2)

CVE-2025-61882
Cleo

Affected Platform (2)

Gladinet CentreStack
Oracle E-business Suite

Threat Actor (1)

Clop

Relationships

Clop uses Data Breach
Clop uses Phishing
Clop uses Ransomware
Clop exploits CVE-2025-61882
Clop exploits Cleo
Clop Data Theft Campaign attributed to Clop
CLOP Extortion Campaign attributed to Clop
CVE-2025-61882 targets Gladinet CentreStack
CVE-2025-61882 targets Oracle E-business Suite
Cleo targets Gladinet CentreStack
Cleo targets Oracle E-business Suite
Clop targets Envoy Air
Clop targets GlobalLogic
Clop targets Harvard University
Clop targets Logitech
Clop related to Phoenix Education Partners
Clop related to Princeton University
Clop related to The Washington Post
Clop related to University of Pennsylvania
Clop related to University Of Phoenix
Clop related to Education
Clop related to Accellion FTA
Clop related to GoAnywhere MFT
Clop related to MOVEit Transfer

Continue Reading

Clop Hackers Exploit Oracle Zero-Day, Breaching Barts Health NHS and Dartmouth Data Logitech Confirms Data Breach Linked to Clop Extortion Gang Logitech Confirms Data Breach from Zero-Day Exploit by Clop Gang Washington Post Confirms Breach from Oracle EBS Attacks by Cl0p Ransomware Gang Cl0p Ransomware Group Claims Data Theft from Nearly 50 Companies Logitech Confirms Data Breach from Zero-Day Exploit Linked to Clop Gang

University of Phoenix Data Breach Affects 3.5 Million Individuals

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading