Moody Bible Institute data breach: 155,226 people after a flaw in software used by schools

How many people were affected by the Moody Bible Institute data breach?

155,226 in total, according to the number the institute reported to Indiana. The letter gives no count. The state lists count their own residents:

Regulator	Who it counts	Number	Recorded
Indiana attorney general	Total reported by the institute	155,226	Notice July 31, 2026
Washington attorney general	Washingtonians	8,955	Reported July 23, 2026
Indiana attorney general	Indiana residents	6,095	Notice July 31, 2026
Texas attorney general	Texans	5,639	Posted August 4, 2026
Massachusetts consumer affairs office	Massachusetts residents	942	Reported July 31, 2026

Texas's attorney general lists 5,639 Texans for the institute, posted on August 4, 2026.

Massachusetts marks Social Security numbers and driver's license numbers as breached for its residents.

What happened at Moody Bible Institute?

The institute says its cybersecurity system flagged unusual activity on its network on June 12, 2026. It began an internal review, secured its systems, told law enforcement and hired a forensic security firm. It later found that information was illegally acquired from its system on or about that same day. On June 23, 2026, it identified which files had been taken.

Date	Event
June 12, 2026	Alert on unusual network activity; files taken on or about this day
June 23, 2026	The institute identifies the files that were acquired
July 23, 2026	Letters dated; notice to Washington
July 31, 2026	Notices recorded in Indiana and Massachusetts
October 26, 2026	Deadline to enroll in Kroll monitoring

The letter does not name the software application or its vendor. It says only that the institute patched the vulnerability and took further steps to lower the risk of a repeat.

What information was involved?

The filed letter names the reader's name and leaves the rest of the list blank, so each letter names its own items. The Washington and Massachusetts records fill in the categories: Social Security numbers, driver's license or ID numbers and dates of birth. The letter says the data set holding the information can be opened only with specialized software and is not generally accessible. It also says the institute has no reason to believe the information has been misused.

What is Moody Bible Institute offering?

Item	Detail from the letter
Service	Kroll 3B Identity Monitoring for one year: triple-bureau credit monitoring, fraud consultation and identity theft restoration
Cost	None; enrolling does not affect your credit score
Enrollment deadline	October 26, 2026

The deadline has passed. The letter's other steps still apply: watch account statements and credit reports, and consider a fraud alert or security freeze. The guide to credit monitoring offers compares offers like this one.

Why did I get a letter from Moody Bible Institute?

The letter says only that your information was in the files taken. It does not say whether recipients are students, alumni, staff or donors. The filed copy also leaves the help-line number blank, so use the number printed on your own letter.

What the documents leave open

• Which software application had the vulnerability, and whether other schools were hit through it.
• Who the 155,226 people are, and how many are current or former students.
• Whether the institute's systems held the data directly or the vulnerable application did.