University of Phoenix discloses data breach after Oracle hack

The University of Phoenix disclosed a November 21 breach in which attackers—believed to be part of the Clop extortion group—exploited a zero-day in Oracle E-Business Suite (CVE-2025-61882) to exfiltrate sensitive personal and financial data (including names, DOBs, SSNs, and bank account information) from students, staff, and suppliers; this incident is described as part of a broader Clop campaign since August 2025 that has impacted numerous universities and major companies and resulted in data being posted on the group's leak site.