Kaplan Says Fall 2025 Breach Exposed Data of at Least 230,941 People
Summary
Kaplan reported that hackers accessed its servers from October 30 to November 18, 2025, and took files containing personal data. State disclosures add up to 230,941 affected people; no group has claimed responsibility.
Key points
- Kaplan’s state breach disclosures add up to 230,941 affected people.
- The company said files containing names, Social Security numbers, and driver’s license numbers were taken.
- Breach notices say hackers had access to Kaplan servers from October 30 to November 18, 2025.
- Kaplan notified law enforcement, which is investigating.
- No hacking group has claimed responsibility.
- Several law firms have filed class-action lawsuits related to the breach.
Article Details
- Victim Organization
- Kaplan
- Incident Type
- Cybersecurity incident involving unauthorized access to servers and theft of files containing personal information
- Incident Date
- 2025-10-30
- Data Types Exposed
- Names
- Social Security numbers
- Driver’s license numbers
- Affected Records
- 230,941 people
- Operational Impact
- Hackers had access to Kaplan servers from October 30 to November 18, 2025, and took files containing personal information. No operational disruption was reported.
- Ransom Or Extortion
- No threat actor has claimed responsibility; no ransom or extortion activity was reported.
- Claim Status
- confirmed