Strategic Education Data Breach Exposes Sensitive Information of Thousands Strategic Education Inc., a publicly traded education services company based in Herndon, Virginia, has confirmed a data breach affecting current and former students, staff, and other individuals. The incident occurred between February 23 and 25, 2026, when a cybercriminal accessed the company’s servers and exfiltrated files containing personally identifiable information (PII). The breach was discovered and investigated by Strategic Education, with findings finalized on May 21, 2026. Exposed data includes names, Social Security numbers, driver’s license numbers, and passport numbers. The company began notifying affected individuals via mail on May 29, 2026, with 2,673 Maine residents confirmed as impacted. Strategic Education operates multiple for-profit education brands, including Strayer University, Capella University, Jack Welch Management Institute, Torrens University Australia, DevMountain, and Hackbright Academy, serving over 100,000 students across its programs. The breach raises concerns about the security of sensitive data within the company’s systems. Legal firm Shamis & Gentile P.A. is investigating potential compensation claims for those affected. The incident underscores ongoing risks in the education sector, where large-scale data repositories make institutions prime targets for cyberattacks.