Campbell University Data Breach Exposes Sensitive Personal, Medical, and Financial Information On April 1, 2026, North Carolina-based Campbell University detected a data breach involving unauthorized access to one of its cloud-based storage systems. The incident occurred between March 31 and April 1, with threat actor Inc Ransom later claiming responsibility for stealing 500 GB of sensitive data. The compromised information includes a wide range of personal, medical, and financial records, such as: - Personal data: Names, addresses, Social Security numbers, driver’s licenses, passport details, student and government IDs, IRS identity protection PINs, parents’ pre-marriage surnames, digital signatures, geolocation data, and non-financial account credentials. - Medical data: Admission/discharge dates, medical record numbers, provider details, diagnoses, treatments, lab results, medications, mental health histories, service dates, and health insurance information. - Financial data: Account details, debit/credit card numbers, and individual taxpayer identification numbers. The breach was first publicly disclosed on May 29, 2026, and reported to the Department of Health and Human Services. Legal teams are investigating the possibility of a class action lawsuit on behalf of affected individuals, with potential compensation for privacy violations, out-of-pocket costs, and other damages. The incident underscores the risks of unauthorized access to large-scale sensitive datasets, particularly in educational and healthcare-adjacent institutions.