Baker University has disclosed a data breach after attackers gained access to its network one year ago and stole the personal, health, and financial information of over 53,000 individuals. Founded in 1858, Baker University is a private university in Baldwin City, Kansas, with nearly 2,000 enrolled students (1,457 undergraduates) and over 300 employees. The school detected suspicious activity on its network after a December 2024 outage and found that attackers had access to its systems from December 2 to 19, stealing sensitive documents. "Through this review, Baker University determined that information which may have been involved included data related to those affiliated with Baker University," it said in a breach notification letter shared on the school's website. "Although the information varied by individual, the information includes name, date of birth, Driver's license number, financial account information, health insurance information, medical information, passport information, Social Security number, student identification number, and tax identification number." In a filing with the Office of the Maine Attorney General, Baker University revealed that the resulting data breach impacts 53,624 individuals. While the school said it found no evidence that the information was used for fraudulent activities, it is now offering free credit monitoring services to those affected and encourages potentially affected individuals to regularly check their account statements and cre...
Baker University says 2024 data breach impacts 53,000 people
BleepingComputer
·Sergiu Gatlan
·Published Dec 23, 2025
·Updated
Affected Software
1 affected component
Oracle E-Business Suite
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses a data breach at Baker University affecting over 53,000 individuals.
2
What security implications are discussed in the article?
The breach resulted in unauthorized access to personal, health, and financial information of individuals.
3
When did the data breach occur?
The data breach occurred one year prior to the university's disclosure in 2024.
4
What type of information was compromised in the breach?
The compromised data includes personal, health, and financial information.
5
What software system is mentioned as potentially affected?
The affected software system mentioned is Oracle E-Business Suite.