Monroe University Confirms Massive Data Breach Affecting 320,000 Individuals Monroe University disclosed a significant data breach in which threat actors stole sensitive personal, financial, and health information belonging to over 320,000 individuals. The attack occurred in December 2024, with attackers maintaining access to the university’s systems for two weeks from December 9 to December 23. The breach was confirmed in September 2025 after a review of the stolen files revealed compromised data, including names, dates of birth, Social Security numbers, driver’s license and passport details, medical records, health insurance information, financial account data, and student records. The university began notifying affected individuals on January 2, 2025, urging them to monitor their credit reports and account activity for signs of fraud. As part of the response, Monroe University offered one year of free credit monitoring through Cyberscout. This is not the first cybersecurity incident for the institution, which was previously targeted in a 2019 ransomware attack when it operated as Monroe College. At the time, attackers demanded 170 bitcoins (approximately $2 million) for decryption. The breach at Monroe University is part of a broader trend of cyberattacks targeting U.S. higher education institutions. In recent months, the University of Hawaii’s Cancer Center reported a ransomware attack in August 2025, while Baker University disclosed a 2024 breach affecting over 53,000 individuals. Additionally, Harvard, Princeton, and the University of Pennsylvania fell victim to voice phishing attacks starting in October 2024, resulting in the theft of donor, staff, student, and alumni data. The Clop ransomware gang also exploited vulnerabilities in Oracle E-Business Suite platforms at Harvard and the University of Pennsylvania, stealing personal and financial information.