Chapman University Data Breach Exposes Sensitive Personal Information
Chapman University reported a data breach to the California Attorney General after detecting a network security incident on January 31, 2025. The breach potentially exposed sensitive personal identifiable information (PII) held by the institution.
Following an internal investigation, Chapman confirmed that an unauthorized third party accessed its systems, prompting a review to assess the scope of the exposure. The university completed its data review on December 31, 2025, though specific details about the compromised information have not been publicly disclosed as of January 16, 2026. Under California state guidelines, the breach may have involved data such as:
- Names
- Social Security numbers
- Government-issued IDs (e.g., driver’s licenses, passports)
- Financial account details (including security codes)
- Medical and health insurance information
- Biometric data (e.g., fingerprints, retina scans)
- Genetic data
On January 8, 2026, Chapman began notifying affected individuals via mail, providing details on the exposed data and offering complimentary credit monitoring services. The breach notice filed with the California Attorney General outlines the incident’s impact and response.
Source: https://straussborrelli.com/2026/01/16/chapman-associates-data-breach-investigation/
Chapman University cybersecurity rating report: https://www.rankiteo.com/company/chapman-university
"id": "CHA1768593593",
"linkid": "chapman-university",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Education',
'location': 'California, USA',
'name': 'Chapman University',
'type': 'Educational Institution'}],
'customer_advisories': 'Notified affected individuals via mail on January 8, '
'2026',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Government-issued IDs (e.g., '
'driver’s licenses, passports)',
'Financial account details '
'(including security codes)',
'Medical and health insurance '
'information',
'Biometric data (e.g., '
'fingerprints, retina scans)',
'Genetic data']},
'date_detected': '2025-01-31',
'date_publicly_disclosed': '2026-01-16',
'date_resolved': '2025-12-31',
'description': 'Chapman University reported a data breach to the California '
'Attorney General after detecting a network security incident '
'on January 31, 2025. The breach potentially exposed sensitive '
'personal identifiable information (PII) held by the '
'institution. Following an internal investigation, Chapman '
'confirmed that an unauthorized third party accessed its '
'systems, prompting a review to assess the scope of the '
'exposure. The university completed its data review on '
'December 31, 2025, though specific details about the '
'compromised information have not been publicly disclosed as '
'of January 16, 2026. Under California state guidelines, the '
'breach may have involved data such as names, Social Security '
'numbers, government-issued IDs, financial account details, '
'medical and health insurance information, biometric data, and '
'genetic data. On January 8, 2026, Chapman began notifying '
'affected individuals via mail, providing details on the '
'exposed data and offering complimentary credit monitoring '
'services.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'(PII)',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed',
'references': [{'date_accessed': '2026-01-16',
'source': 'California Attorney General Breach Notification'}],
'regulatory_compliance': {'regulations_violated': 'California state data '
'breach notification '
'guidelines',
'regulatory_notifications': 'Reported to the '
'California Attorney '
'General'},
'response': {'communication_strategy': 'Notified affected individuals via '
'mail on January 8, 2026, offering '
'complimentary credit monitoring '
'services'},
'title': 'Chapman University Data Breach Exposes Sensitive Personal '
'Information',
'type': 'Data Breach'}