Hackers accessed personal information of about 27,500 individuals from the University of Sydney's online code library. The stolen data includes names, addresses, and job details of current and former staff, as well as some alumni and students from 2010-2019. The university is investigating the breach and notifying those affected.

The University of Phoenix reported a data breach affecting 3.5 million individuals, discovered in November 2025 after cybercriminals targeted its systems over the summer. Compromised data includes names, birth dates, Social Security numbers, and bank information, though no leaked data has surfaced publicly. Other universities were also affected by the same campaign.

The University of Pennsylvania experienced a cybersecurity breach, resulting in offensive emails sent to students and alumni from official university addresses. The emails falsely claimed that data had been stolen and criticized the university's security and admissions practices. Penn's Incident Response team is investigating the situation.

A 27-year-old former student of Western Sydney University has been arrested for allegedly hacking the university's systems to obtain cheaper parking and access confidential data, affecting hundreds of staff and students. Birdie Kingston faces 20 charges, including unauthorized access and data theft, and is accused of stealing over 100GB of data and manipulating academic records. Despite prior warnings from police, she continued her hacking activities, even threatening to sell stolen student information on the dark web.

Faculty at the University of California are expressing strong opposition to a cybersecurity mandate involving Trellix software, fearing it could grant unauthorized access to their computers. Despite assurances from university officials that user content will remain protected, concerns persist about potential government overreach and the implications for academic freedom. The resistance has led to petitions and calls for unionization among faculty.