Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.

Strategic Education Data Breach

Strategic Education Inc., the parent company of Strayer University and Capella University, disclosed a data breach after hackers accessed company servers between February 23 and February 25, 2026. The incident affected 2,673 Maine residents and may have exposed names, Social Security numbers, driver’s license numbers, and passport numbers. Affected individuals should enroll in the offered identity monitoring services and consider exploring their legal options.

Strategic Education
Date of Breach: February 23, 2026, to February 25, 2026
CAU logo

Who was affected:

Clients of Strategic Education

Impacted Data:

Social Security number

Driver’s license number

Passport number

Strategic Education Inc. (“SEI”), the parent company of Strayer University and Capella University, recently disclosed a data breach involving unauthorized access to its computer servers. The incident may have exposed highly sensitive personal information, including Social Security numbers, driver’s license numbers, and passport numbers.

Strategic Education Inc.’s Data Breach Investigation

Strategic Education Inc. (“SEI”), the parent company of higher education institutions including Strayer University and Capella University, recently concluded an investigation into a cybersecurity incident involving unauthorized access to its computer network. According to information provided to regulators, SEI discovered that an unauthorized actor gained access to company servers and copied certain files containing sensitive personal information.

Upon discovering the incident, SEI secured its network and launched an investigation to determine the scope of the unauthorized access. The investigation revealed that an unauthorized actor accessed SEI’s computer servers between February 23, 2026, and February 25, 2026. During that time, the attacker reportedly copied certain files from the company’s systems.

Following the investigation, SEI conducted a review of the impacted files to determine what information was involved and which individuals may have been affected. On May 21, 2026, the company concluded that the files contained names and one or more sensitive data elements, including Social Security numbers, driver’s license numbers, and passport numbers. According to the notice, 2,673 Maine residents were affected by the breach.

The incident is particularly concerning because the exposed information includes government-issued identification documents and Social Security numbers. Cybercriminals can potentially use this information to commit identity theft, financial fraud, tax fraud, or other forms of misuse. Even when there is no immediate evidence of fraudulent activity, affected individuals may face ongoing risks associated with the exposure of their personal information.

On May 29, 2026, SEI began mailing notification letters to affected individuals. The company also established a dedicated toll-free assistance line and is offering complimentary identity monitoring services through Kroll. These services include credit monitoring, fraud consultation, and identity theft restoration support.

SEI stated that it has implemented additional measures to strengthen the security of its information technology environment and reduce the likelihood of similar incidents occurring in the future. The company also encouraged affected individuals to remain vigilant by monitoring credit reports and financial accounts for signs of unauthorized activity.

Data breaches involving educational institutions and their parent organizations can have serious consequences because these entities often maintain extensive personal information about students, alumni, employees, and applicants. Individuals who receive notification from SEI may wish to monitor their information closely and learn more about their legal rights following the exposure of sensitive personal data.

When Did This Breach Occur?

According to Strategic Education Inc.:

  • Date Breach Occurred: February 23, 2026 through February 25, 2026
  • Date Information Review Completed: May 21, 2026
  • Notification Letters Mailed: May 29, 2026
  • Affected Maine Residents: 2,673

The investigation determined that an unauthorized actor accessed company servers and copied certain files during the affected period.

What Information Was Breached?

According to SEI, the affected files contained names and one or more of the following:

  • Social Security number
  • Driver’s license number
  • Passport number

The specific information involved may vary depending on the individual.

What You Can Do

If you received a notification from Strategic Education Inc., consider taking the following steps:

  • Enroll in the complimentary Kroll identity monitoring services.
  • Review your credit reports for unauthorized accounts or inquiries.
  • Monitor financial statements and accounts for suspicious activity.
  • Consider placing a fraud alert or security freeze on your credit reports.
  • Watch for signs of tax fraud, identity theft, or misuse of government-issued identification.
  • Maintain records of any expenses or time spent responding to the breach.

Consumers who have been impacted by a data breach may also wish to learn more about their legal rights and whether compensation may be available for damages related to the exposure of their information.

File a Data Breach Lawsuit Against Strategic Education Inc.

If you received a data breach notification from Strategic Education Inc., you may have legal rights. Organizations that collect and maintain sensitive personal information are expected to implement reasonable safeguards to protect that data from unauthorized access. When information such as Social Security numbers, driver’s license numbers, and passport numbers is exposed, affected individuals may face significant privacy and identity theft risks.

A data breach lawsuit may seek compensation for damages related to loss of privacy, time spent monitoring accounts, out-of-pocket expenses, identity theft risks, and other harms resulting from the exposure of sensitive information.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: February 23, 2026, to February 25, 2026
Date of Breach: June 19, 2025, to June 20, 2025
Date of Breach: May 1, 2026

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.