University of Phoenix data breach impacts nearly 3.5 million individuals

The Clop ransomware group exploited a zero-day in Oracle E-Business Suite (CVE-2025-61882) to exfiltrate personal and financial data for 3,489,274 University of Phoenix students, employees, and suppliers as part of a broader extortion campaign affecting multiple universities and enterprise platforms; the university disclosed the breach, is offering identity protection to affected individuals, and authorities (including a U.S. State Department reward) are investigating.