Indiana-based Valparaiso University recently experienced a significant data breach that may impact its students and faculty. Between Aug. 7 and Aug. 8, 2025, an unauthorized third party accessed the university’s network and copied or downloaded certain files and folders.
The breach was discovered after Valparaiso University noticed unusual activity and promptly began an investigation with the help of external cybersecurity experts. On Aug. 11, 2025, it was determined that sensitive information had been compromised.
The ongoing review suggests that the information exposed varies by individual but may include names, Social Security numbers, driver’s license or state identification numbers, and financial account information. All of these are considered personally identifiable information (PII). The full scope of affected individuals is still being determined, as the university continues its comprehensive review of the impacted files and folders.
The identity of those responsible has not been disclosed. Given the types of data involved, the breach is considered severe, as Social Security numbers and financial account information can be used for identity theft and fraud.
Upon discovering the breach, Valparaiso University quickly launched an investigation with the support of third-party cybersecurity specialists to determine the nature and scope of the incident. The university has notified law enforcement and is in the process of contacting individuals whose information may have been affected.
Additionally, Valparaiso University is reviewing and enhancing its cybersecurity policies and procedures to strengthen the security of data stored on its systems.
For those who may be affected, the university encourages vigilance against identity theft and fraud. Individuals are advised to review credit reports, account statements, and explanation of benefits forms for suspicious activity or errors. Under U.S. law, everyone is entitled to one free credit report annually from each of the three major credit bureaus: TransUnion, Experian, and Equifax. Affected individuals can order their free credit report at Annual Credit Report.
The university has provided a dedicated phone line for questions about the incident at 1-833-844-9953, available Monday through Friday from 8 a.m. to 8 p.m. ET, excluding holidays. Written inquiries can be sent to 1700 Chapel Drive, Valparaiso, IN 46383. Additional guidance is available in the official Notice of Data Incident posted on the university’s website.
Individuals have the right to place a fraud alert or credit freeze on their credit file at no cost. A fraud alert can help protect against unauthorized credit activity, while a credit freeze prevents new credit, loans, or services from being approved without consent. The Federal Trade Commission (FTC) provides further information on identity theft prevention and recovery at IdentityTheft.gov.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.