Monmouth University data breach: 164,041 people, files taken from February 2026

How many people were affected by the Monmouth University data breach?

164,041 in total, according to the number the university reported to Indiana. The letter gives no count.

Regulator	Who it counts	Number	Recorded
Indiana attorney general	Total reported by Monmouth University	164,041	Notice June 30, 2026
Massachusetts consumer affairs office	Massachusetts residents (two reports: 843 and 2,543)	3,386	Reported June 30, 2026
Texas attorney general	Texans	1,105	Posted October 28, 2026
Indiana attorney general	Indiana residents	81	Notice June 30, 2026

Texas's attorney general lists 1,105 Texans for Monmouth University, posted on October 28, 2026.

Massachusetts logged two Monmouth reports the same day (2026-1068 for 843 residents and 2026-1069 for 2,543). Both mark all five tracked categories as breached. The 3,386 above adds the two; the record does not say whether anyone appears in both.

What happened at Monmouth University?

Date	Event
February 5, 2026	Files start being taken (on or about)
March 3, 2026	Monmouth learns of the access
May 29, 2026	Review finds personal information in the files
June 30, 2026	Letters dated; notices to Indiana and Massachusetts

Monmouth says it investigated, secured its systems, notified federal law enforcement and hired a forensic security firm. The taking went on for 26 days before the university learned of it, and letters went out 119 days after that.

What information was involved?

The letter lists what the files could contain for each reader.

Category	Named in the letter
Identity	Name, date of birth
Government IDs	Social Security number, driver's license or state ID, passport
Financial	Financial account number, payment card information
Health	Medical treatment or diagnosis information, health insurance information
Logins	Username and password

Anyone whose letter lists a username and password should change it wherever it was used. The university says it has no evidence the information has been misused.

What is Monmouth University offering?

Item	Detail from the letter
Service	Experian IdentityWorks Credit 3B: 24 months (Massachusetts copies), 12 months (Nebraska copy)
Help line	(888) 398-1742, 9:00 a.m. to 7:00 p.m. Eastern Time, Monday through Friday

Is the Monmouth credit monitoring one year or two?

It depends on the letter. Both copies Monmouth filed in Massachusetts, reports 2026-1068 and 2026-1069, offer a two-year membership and describe it as 24 months. The copy posted by Nebraska's attorney general, dated the same day with the same wording about the incident, offers a one-year membership and calls it a 12-month membership. The letters do not explain the difference. The term printed in a reader's own letter is the one that applies. The enrollment deadline and activation code are blank in every filed copy, so the last day to sign up is only in the letters sent to people.

Both versions give the same help line, (888) 398-1742, and the same Experian care number for identity restoration, (833) 918-7342. A credit freeze at Equifax, Experian and TransUnion is free and has no deadline.

Letter copy	Term	Where it is filed
Report 2026-1068	Two years (24 months)	Massachusetts consumer affairs office
Report 2026-1069	Two years (24 months)	Massachusetts consumer affairs office
Nebraska copy	One year (12 months)	Nebraska attorney general

The guide to credit monitoring offers compares offers like this one. Monroe University, a different school, reported its own breach in January 2026.

What the documents leave open

• How the third party got into the network.
• Whether the 164,041 are students, alumni, staff, applicants or patients.
• Why Massachusetts holds two separate reports.