Baker Data Breach Exposes Sensitive Personal and Health Information
In December 2024, Baker, a professional services firm, detected suspicious activity in its systems, triggering a network outage and prompting an internal investigation. The probe confirmed that an unauthorized third party accessed or acquired sensitive data between December 2 and December 19, 2024.
The compromised information varies by individual but may include names, Social Security numbers, dates of birth, driver’s license and passport details, financial account information, tax and student identification numbers, health insurance data, and medical records.
Baker publicly disclosed the breach on its website and began mailing notification letters to affected individuals on December 19, 2025. As part of its response, the company is providing impacted parties with details on the exposed data and complimentary credit monitoring services. The incident underscores the ongoing risks of cyber threats targeting personal and health-related information.
Source: https://straussborrelli.com/2025/12/22/baker-university-data-breach-investigation/
Baker Donelson cybersecurity rating report: https://www.rankiteo.com/company/baker-donelson
"id": "BAK1766419601",
"linkid": "baker-donelson",
"type": "Breach",
"date": "12/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Impacted individuals',
'name': 'Baker',
'type': 'Organization'}],
'customer_advisories': 'Data breach notification letters mailed to impacted '
'individuals on December 19, 2025',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number',
'Date of birth',
'Driver’s license number',
'Financial account information',
'Passport information',
'Student identification number',
'Tax identification number',
'Health insurance information',
'Medical information']},
'date_detected': '2024-12',
'date_publicly_disclosed': '2024-12-19',
'description': 'Baker experienced a data breach in which sensitive personal '
'identifiable information and protected health information may '
'have been compromised. The breach was discovered due to '
'suspicious activity related to certain systems, resulting in '
'a network outage. An investigation confirmed unauthorized '
'access to sensitive data between December 2 and December 19, '
'2024.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'and protected health information',
'downtime': 'Network outage',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed',
'recommendations': 'Providing affected individuals with complimentary credit '
'monitoring services',
'references': [{'source': 'Baker website breach notice'}],
'response': {'communication_strategy': 'Website breach notice and mailed data '
'breach notification letters'},
'threat_actor': 'Unauthorized third party',
'title': 'Baker Data Breach',
'type': 'Data Breach'}