Moody Bible Institute Says Vulnerability Led to Personal Information Being Taken
Summary
Moody Bible Institute says information including individuals’ names was acquired from its systems on or about June 12, 2026, after a software vulnerability was exploited. The institute says it patched the flaw and is offering credit monitoring.
Key points
- The institute says its cybersecurity system detected unusual network activity on June 12, 2026, and that information was illegally acquired from its systems around that date.
- The affected files reportedly contained individuals’ names; the notice does not specify how many people were affected.
- The institute attributes the incident to a vulnerability in software commonly used by educational institutions, but does not name the software or vulnerability.
- The institute says it patched the vulnerability, took additional steps to reduce risk, and notified law enforcement.
- The notice says the institute has no reason to believe the information was misused for fraud or identity theft.
- Affected individuals were offered one year of identity monitoring and credit monitoring through Kroll. The notice also recommends monitoring accounts and credit reports.
Article Details
- Victim Organization
- The Moody Bible Institute of Chicago
- Incident Type
- Unauthorized acquisition of personal information following exploitation of a vulnerability in a software application commonly used by educational institutions; the application was not named.
- Incident Date
- 2026-06-12
- Disclosure Date
- 2026-07-23
- Data Types Exposed
- Name
- Operational Impact
- The organization secured its systems, engaged a forensic security firm, notified law enforcement, and patched the vulnerability. No service disruption is reported.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed