Where does the Bastyr University case file come from?

Every entry is taken from the breach report Bastyr University lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Bastyr University Data Breach

This file collects the dated facts on record for the Bastyr University incident. The state report is dated September 17, 2025. The incident itself is dated April 23, 2025.

Timeline

147 days separate the incident date from the date it was reported.

April 23, 2025Incident dateWhen the filing says the breach took place.
September 17, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: September 17, 2025
Incident date: April 23, 2025
Receiving office: Indiana Attorney General

Case notes

Bastyr University in Indiana has formally reported a data security incident to regulatory authorities, with the official filing dated September 17, 2025. This notification pertains to a breach of its systems that originally took place on April 23, 2025.

The university's official filing indicates that personal information was involved in this security event. However, the specific types of data compromised have not been detailed within the public record.

At present, Bastyr University states that the investigation into the breach is ongoing. The exact number of individuals whose information may have been exposed through this incident remains unspecified in the publicly available documents.

Individuals who believe they may be affected by this breach are advised to remain vigilant for any unusual communications or unauthorized activity. It is recommended to regularly review statements from financial institutions and any other accounts linked to your personal data for discrepancies.

Consider placing a fraud alert on your credit file with the major credit bureaus if you are concerned your information could be misused. This step can help prevent unauthorized access to new credit lines and adds an extra layer of protection.

Questions about this case file

Where does the Bastyr University case file come from?: Every entry is taken from the breach report Bastyr University lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the Bastyr University breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files