Monmouth University Data Breach Exposes PHI and PII

Monmouth University, a private university located in West Long Branch, New Jersey, disclosed a data breach that exposed a wide range of sensitive personal, financial and medical information. The total number of individuals affected across the United States has not been publicly disclosed, although at least 842 Massachusetts residents, 322 Texas residents, 217 New Hampshire residents and 116 Vermont residents were impacted.

On March 26, 2026, a ransomware group named Pear posted a claim on the Tor network, stating it had obtained 16 terabytes of data from the university.

At this time, details of the breach such as the specific dates during which the unauthorized access to the university's systems took place have not been disclosed.

The types of personal information exposed in the breach included names, addresses, dates of birth, Social Security numbers, driver's license numbers, state ID card numbers, passport numbers, financial information (such as bank account numbers, credit card numbers and debit card numbers), medical information and health insurance information.

Monmouth University is notifying affected individuals by U.S. Mail.

Monmouth University's response to the breach

Additional details about the university's response efforts have not been publicly disclosed. Affected individuals should review the notification letter carefully when it arrives, as it may contain important information about services or resources the university is offering to those impacted.

Affected individuals are encouraged to take protective steps promptly, even before receiving a formal notification letter. Individuals who believe their information may have been compromised but have not yet received a letter may wish to contact Monmouth University directly for further guidance.