University of Phoenix, Baker University Announce Breaches
At McShane & Brady, we wanted to make everyone aware of some the most recent data breaches. If you or someone you know who may have been affected by these or any other breaches, please call our office at 816-888-8010 or use our contact form on our website. We want to hold those entrusted with protecting our private information responsible.
University of Phoenix
On November 21, 2025, the University of Phoenix learned that an Oracle E-Business Suite software vulnerability may have resulted in a cybersecurity incident.
According to a letter of breach notification filed with the Office of the Maine Attorney General, “On November 24, 2025, the University of Phoenix determined that, like many other organizations, including other academic institutions, an unauthorized third-party exploited a previously unknown software vulnerability in Oracle EBS to exfiltrate certain data from within the University of Phoenix’s Oracle EBS environment. This exfiltration occurred between August 13 and 22, 2025.”
Letters of notification will begin to be sent to those affected on December 22.
This breach has affected over 3.5 million people.
Baker University
In December 2024, Baker University discovered suspicious activity related to certain systems which resulted in a network outage.
An investigation was conducted and concluded there was unauthorized access and/or acquisition of certain files and folders within their network between December 2, 2024, and December 19, 2024.
Information that could have been subject to unauthorized access includes name, Social Security number, and financial account information.
According to the Office of the Maine Attorney General, this breach has affected over 53,000 people.
Richmond Behavioral Health Authority
Richmond Behavioral Health Authority, the public entity responsible for providing mental health, substance abuse, and prevention services in Richmond, Virginia, has recently disclosed a data incident.
On or around September 30, 2025, RBHA discovered unauthorized access to its computer systems.
An investigation was conducted and concluded that hackers first accessed its network on September 29, 2025.
The review of the exposed files contained personal and protected health information such as full names, passport numbers, Social Security numbers, financial account information, and health information.
Letters of notification are being sent to all individuals potentially affected “out of an abundance of caution.”
This breach has affected over 113,000 individuals.
If you receive notification of these breaches or any other data breaches, we ask that you call our office at 816-888-8010 or email us at firm@mcshanebradylaw.com.
From hospitals, healthcare providers, government services, service providers to insurance companies, proper precautions and training have not been made to secure these records. Once public, your information is out there for everyone to see. McShane & Brady is leading firm representing those who have affected by a data breach.
