LatestStatesCompaniesPricingAPIData Start free trial

Latest / Federal (SEC) / December 2025

Phoenix Education Partners, Inc.

Phoenix Education Partners, Inc. notified SEC Form 8-K on Dec 2, 2025 of a data breach, which occurred on Nov 21, 2025. Data exposed: Social Security number, Financial / bank account.

Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Phoenix Education Partners, Inc.
Source
SEC Form 8-K · source record
Date reported
Dec 2, 2025
Date(s) of breach
November 21, 2025
Residents affected
Not published by this source
Data exposed
Social Security number Financial / bank account
Notice letter
Form 8-K filing
Days to notice
11 days from the end of the breach window (Nov 21, 2025, no discovery date in the letter) to the Federal (SEC) record (Dec 2, 2025).
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-11-12 23:17 UTC
Ticker
PXED

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 23:17 UTC on Nov 12, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.

Item 8.01 excerpt

Item 8.01 Other Events. The University of Phoenix, Inc., a subsidiary of Phoenix Education Partners, Inc. (including the University, the “ Company ”), recently experienced a cybersecurity incident involving the Oracle E-Business Suite software platform (“ Oracle EBS ”). The Company is one of a number of organizations, including other academic institutions, from which an unauthorized third-party exfiltrated data by exploiting a previously unknown software vulnerability in Oracle EBS. The incident did not impact the business operations or student programming of the Company. Upon detecting the incident on November 21, 2025, the Company promptly took steps to investigate and respond with the assistance of leading third-party cybersecurity firms. While the investigation remains ongoing, at this time, the Company believes that the software vulnerability was used in August 2025 to copy certain data maintained in the Company’s Oracle EBS environment. The Company promptly installed Oracle EBS software patches to remediate the vulnerability following their release in October 2025. The Company believes that certain personal information, including names and contact information, dates of birth, social security numbers, and bank account and routing numbers, with respect to numerous individuals was accessed without authorization. To the Company’s knowledge, the unauthorized third-party has not publicly disseminated the data. The Company is continuing to review the impacted data and will provide the required notifications to affected parties and applicable regulatory entities. As of the date of this filing, the Company believes that the incident will not have a material adverse effect on its business operations or student programming. The Company continues to investigate the incident a

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.