Loyola University Chicago Data Breach

Loyola University Chicago (the “University”) has notified individuals about a data security incident that impacted a small number of LOCUS accounts. The breach was due to a flaw in the third-party vendor’s program used to generate Universal IDs (UVIDs) for LOCUS account owners. This issue resulted in unintended users accessing personal information from affected accounts. This article outlines the breach, the information involved, and what individuals can do to protect themselves.

Loyola University Chicago’s Data Breach Investigation

The breach occurred when a flaw in the vendor’s program caused data from multiple LOCUS account holders to be combined. This resulted in unintended users, referred to as “Unintended Users,” having access to the actual account owner’s data. Both the LOCUS account owner and the Unintended User’s UVIDs were merged in the vendor’s system, granting access to the account.

The University was first notified of the issue in early November 2025 when an Unintended User reported that, upon logging in, they were taken to a different LOCUS account that was not their own. Loyola’s Information Security Office (ISO) immediately began investigating the incident and took immediate steps to contain and address the issue.

The University contacted the third-party vendor and suspended the use of the vendor’s program used to generate UVIDs. They also took remedial actions to secure the affected accounts and prevent further unauthorized access.

When Did This Breach Occur?

The breach was identified in the first half of November 2025, after an Unintended User reported accessing another individual’s LOCUS account due to the flaw in the vendor’s program. The issue itself began when the vendor’s program was used to combine data from multiple users, but the problem became known only after the Unintended User accessed the account.

What Information Was Breached?

The breach involved a small number of LOCUS accounts, and both the actual account owners and the unintended users were impacted. The compromised information includes personally identifiable information (PII), which may have included:

• Names

• Social Security numbers

• Personal contact information

• Academic information associated with the account

While the total number of impacted LOCUS accounts is small, it is essential for affected individuals to take steps to protect their personal data.

What You Can Do

If you were affected by the Loyola University Chicago data breach, it’s important to take the following steps to protect your personal information:

• Change your account passwords: If you still have access to your LOCUS account, it is recommended that you change your password to a strong, unique one to secure your account.

• Monitor your accounts: Keep an eye on your financial and academic records for any suspicious activity that could indicate misuse of your information.

• Request a credit report: If your Social Security number or other sensitive personal data was compromised, you can request a free credit report from each of the three major credit reporting agencies: Equifax, Experian, and TransUnion.

• Place a fraud alert: Consider placing a fraud alert on your credit report, which requires businesses to verify your identity before opening new accounts in your name.

• Review your academic and personal records: Watch for any unusual activity related to your academic or personal records that may be connected to this breach.

Loyola University Chicago is taking steps to ensure the integrity of its IT systems moving forward, including further audits and enhanced security measures to prevent future breaches.

File a Data Breach Lawsuit Against Loyola University Chicago

If you were notified that your information was compromised in this data breach, you may be entitled to file a class action lawsuit against Loyola University Chicago for failing to protect your personal information. Data breaches like this can lead to identity theft and other forms of harm, and affected individuals may be entitled to compensation.

At Class Action U, we specialize in helping individuals whose personal data has been exposed in security incidents. If you were impacted by this breach, we can connect you with experienced attorneys to explore your legal options.

Contact us today for a free consultation to learn more about your rights and whether you are eligible to file a lawsuit.There’s no cost to reach out to our legal partner, and no obligation to take further action after speaking with someone from our team.