Regulator-posted notice

Breach notice filed by University of the People (November 2025)

Organization named: University of the People

What the sources say

Washington Attorney General data breach notifications Primary notice

Posted on the Washington Attorney General data breach notifications with a submission date of Nov. 14, 2025.

Organization as reported: University of the People
Information types as reported: Name; Full Date of Birth; Student ID Number
Incident dates as reported: Sept. 9, 2025
Submission date: Nov. 14, 2025
Observed by BreachRecords: 2026-10-19 04:56 UTC (revision 25301, page:4:row:7)
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Washington data breach notifications dataset (data.wa.gov sb4j-ca4h) Duplicate filing

Posted on the Washington data breach notifications dataset with a submission date of Nov. 14, 2025.

Organization as reported: University of the People, CA
Entity type as reported: Education
Category as reported: Unauthorized Access
Incident dates as reported: Sept. 9, 2025 to Oct. 23, 2025
Discovery date as reported: Sept. 22, 2025
Submission date: Nov. 14, 2025
Observed by BreachRecords: 2026-11-01 20:03 UTC (revision 63776, row:1492)
Extraction: Parsed from a document; extraction confidence 0.85
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Figures, per source

1,650 individuals affected (residents of the reporting state), according to the Washington Attorney General data breach notifications, source date Nov. 14, 2025, revision observed 2026-10-19.
1,650 individuals affected (residents of the reporting state), according to the Washington data breach notifications dataset, source date Nov. 14, 2025, revision observed 2026-11-01.

Each figure is one source's figure with the basis that source gave. Figures from different sources are shown side by side and are not added, averaged or chosen between.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

2025-11-14Submission date (Washington Attorney General data breach notifications)
2025-11-14Submission date (Washington data breach notifications dataset)
2026-10-19Observed by BreachRecords (revision 25301)
2026-11-01Observed by BreachRecords (revision 63776)
2026-11-04Approved by a reviewer

Organizations linked by a reviewer

University of the People Named as the filer Linked 2026-11-04, method name exact.

Archived evidence

264d45f73831ec8fc298837002b836f792a7cfd7f3d6b4d2128484a23223c042
text/csv, 453,656 bytes, retrieved from Washington data breach notifications dataset, 2026-11-01 20:03 UTC. Archived privately · Provenance · Source page
41b02e6041dbda710de14f3ebfd9ceb619d9eba2f524b08bacbc21c072e61730
text/html, 155,994 bytes, retrieved from Washington Attorney General data breach notifications, 2026-10-19 04:56 UTC. Archived privately · Provenance · Source page

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Breach notice filed by University of the People (November 2025). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.