Data Breach Roundup (Dec 19 – Dec 25, 2025)
Welcome to Data Breach Roundups, our new weekly series where we highlight notable data breaches we encounter. They're more common than you might think! If you want this weekly digest delivered to your inbox in the future, edit your newsletter settings to subscribe to the new 'Data Breach Roundups' mailing list.
University of Phoenix data breach impacts nearly 3.5 million individuals
Yet another breach resulting from the Oracle E-Business Suite, the data belonged staff, suppliers, and current and former students. The article didn't say exactly what data was compromised.

Nissan says thousands of customers exposed in Red Hat breach
This took place in September and impacted 21,000 customers in Japan. The data included full names, physical addresses, phone numbers, email addresses, and "customer data used in sales operations."

Baker University says 2024 data breach impacts 53,000 people
Baker is a private university based out of Kansas with about 2,300 students and faculty. The information stolen varies from person to person, but includes name, date of birth, Driver's license number, financial account information, health insurance information, medical information, passport information, Social Security number, student identification number, and tax identification number.
The fact that breaches like this can go unreported for so long without consequence is a reminder to be proactive with things like credit freezes.

US insurance giant Aflac says hackers stole personal and health data of 22.6 million people
This is an update to a breach that occurred in June, now providing a number of how many people were impacted. Data included names, dates of birth, home addresses, government-issued ID numbers (such as passports and state ID cards) and driver’s license numbers, and Social Security numbers, as well as medical and health insurance information. The company claims they have about 50 million customers, so this would be nearly half of them.


Community Discussion