Southern Illinois University

Summary

Southern Illinois University experienced a data breach when an unauthorized user accessed certain university files. The intrusion occurred prior to the university's discovery, and the institution later notified the Texas Attorney General of the incident. Exposed information included names, addresses, and Social Security numbers. Individuals who received breach notifications may face increased risk of identity theft and fraud. A national class action law firm is investigating the breach to evaluate potential legal claims on behalf of affected individuals.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Southern Illinois University reported that a data breach occurred on August 21, 2026, after an unauthorized user accessed certain university files. The breach activity is reported to have taken place during late 2025, with filings indicating dates between July and September 2025. The university did not discover the intrusion until around July 24, 2026. On or about August 21, 2026, the institution notified the Texas Attorney General of the breach. The press release announcing the investigation was issued on August 25, 2026.

The exposed information may have included names, addresses, and Social Security numbers of affected individuals. Individuals who received a data breach notification from the university may be at increased risk of identity theft and fraud. Edelson Lechtzin LLP, a national class action law firm, launched an investigation into the breach on the date of the press release. The firm stated that it will evaluate rights and potential claims at no cost to affected individuals. The investigation seeks to determine whether a class action can be pursued on behalf of the impacted individuals.

The university notified the Texas Attorney General of the breach on or about August 21, 2026. Edelson Lechtzin LLP announced that it is investigating data privacy claims arising from the incident. The firm stated that it will evaluate rights and potential claims at no cost to affected individuals. No additional details about the attacker’s identity, the specific systems involved, or the exact number of records exposed were provided in the source material.

Sources

Sources available to members: 1 source.