National University of Natural Medicine (NUNM) experienced a cybersecurity breach involving unauthorized access to an employee email account. The breach, discovered in late July 2025, may have exposed personal information, prompting the university to offer free identity monitoring services.
National University of Natural Medicine’s Data Breach Investigation
The National University of Natural Medicine (NUNM), a well-regarded institution in Portland, Oregon, recently suffered a cybersecurity breach that placed sensitive personal data at risk. The incident occurred when an unauthorized party gained access to a staff member’s email account between July 22 and July 29, 2025.
NUNM discovered the intrusion on July 29, 2025, and immediately launched an internal investigation. The university also engaged external cybersecurity professionals to assist in assessing the scope and securing its systems. Following the investigation, a thorough review of the affected mailbox revealed that personal information was potentially exposed.
By November 7, 2025, NUNM determined that emails within the compromised account may have included sensitive personal data. While the university has not disclosed all specific data types affected, it confirmed that some individuals’ personal information was present in the accessed emails.
In response, NUNM took swift action to secure the compromised account and implemented improved security protocols. To support impacted individuals, the university partnered with Kroll to offer complimentary identity monitoring services. This proactive response is intended to reassure those affected and help mitigate the risk of identity theft or financial fraud.
While there is currently no evidence that the exposed information has been misused, data breaches of this nature carry serious risks. Educational institutions are common targets due to the volume of personal data they manage, and this incident underscores the importance of cybersecurity vigilance.
Class Action U remains committed to helping those affected by data breaches understand their rights and seek justice. We help consumers take collective legal action and connect with experienced attorneys who know how to hold institutions accountable for privacy failures.
When Did This Breach Occur?
- Unauthorized Access Window: July 22, 2025 – July 29, 2025
- Date Discovered: July 29, 2025
- Date of Personal Data Determination: November 7, 2025
What Information Was Breached?
- Personal information contained in employee emails (exact types not fully disclosed)
- Potentially included:
- Names
- Contact details
- Possibly medical or academic records (based on context)
What You Can Do
NUNM is offering complimentary identity monitoring through Kroll to those potentially impacted. If you received a notification letter, consider taking the following actions:
- Enroll in the identity monitoring services provided
- Monitor your financial statements and credit reports regularly
- Place a fraud alert or credit freeze with the major credit bureaus
- Change passwords on accounts associated with your NUNM profile
- Stay alert for phishing attempts or unusual account activity
Even if you have not yet noticed suspicious activity, it’s important to remain proactive. If your data was exposed, you may be entitled to compensation through legal action. Class Action U can help you determine your eligibility and guide you through next steps.
File a Data Breach Lawsuit Against National University of Natural Medicine
If you were notified that your personal information was exposed in this NUNM data breach, you could be eligible to file a lawsuit. Data breaches can lead to identity theft, fraud, and emotional distress—and institutions must be held accountable when they fail to protect private information.
Legal action may help you recover damages and encourage stronger data protection in the future. You do not have to handle this alone. Class Action U is here to make the legal process accessible and supportive.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
