University of Phoenix Sued Over Oracle Hub-and-Spoke Data Breach

December 8, 2025, 8:42 PM UTC

Two former University of Phoenix students sued the private, for-profit school for negligence after it announced that a vulnerability in its Oracle E-Business Suite software led to a data breach.

Former students Mari Soliz and Denise Rico’s proposed class action filed in the US District Court for the District of Arizona blamed the breach on a ransomware group that exploited a zero day vulnerability, the term for a previously unknown security flaw.

A number of current and former students, employees, faculty, and suppliers may have had their financial information, Social Security numbers, and birth dates compromised, according to the university’s ...

Learn more about Bloomberg Law or Log In to keep reading:

See Breaking News in Context

Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.

Already a subscriber?

Log in to keep reading or access research tools and resources.