Strategic Education Data Breach Exposes Student SSNs and More

Strategic Education Inc., the parent company of Strayer University and Capella University, disclosed a data breach involving unauthorized access to its computer network.

The cybersecurity incident was disclosed to the Maine Attorney General on June 1, 2026, with 2,673 Maine residents identified as compromised. The education services holding company discovered the breach on May 21, 2026, and began notifying affected individuals by mail on May 29, 2026.

According to the disclosure to affected individuals, an unauthorized actor accessed Strategic Education computer servers between Feb. 23, 2026, and Feb. 25, 2026. During that two-day window, the cybercriminal took copies of certain files stored on the network.

The educational services company completed its review of the affected files on May 21, 2026, and confirmed the types of information exposed included names, Social Security numbers, driver's license numbers and passport numbers. The number of current and former students and staff impacted by the data breach has not been released, but is believed to be substantial, considering total enrollment across all institutions has been over 100,000 in recent years.

Strategic Education response to the breach

Upon discovering the incident, Strategic Education secured its network and initiated an investigation into the scope of the unauthorized access. Impacted students, staff and other individuals have been instructed to regularly review their credit report for unauthorized activity.

The educational company is also offering complimentary Kroll identity monitoring services. This includes single-bureau credit monitoring, unlimited access to consult with a Kroll fraud specialist and identity theft restoration, which includes a dedicated Kroll licensed investigator.

Strategic Education has also established a toll-free call center for questions about the data breach at 844-959-7093, available Monday through Friday between 8:00 a.m. and 5:30 p.m. Central Time, excluding major U.S. holidays.