Bastyr University data breach
Bastyr University recently reported a data security incident to the Indiana Attorney General, confirming that internal systems may have been accessed by unauthorized parties. This event, reported on September 17, 2025, impacts individuals whose personal information was held by the university and potentially compromised. If you received a notification, understanding the implications for your data is a key next step.
Docket sheet
- Company
- Bastyr University
- Venue
- Indiana Attorney General
- Filed
- September 17, 2025
- People affected
- Not stated
- Status
- Investigation Open
Where this breach stands
- 1
Breach occurredApril 23, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralSeptember 17, 2025
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Investigation Open. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Clerk's notes
Bastyr University, an institution specializing in natural health arts and sciences, has formally reported a data security incident to the Indiana Attorney General. The university confirmed that unauthorized parties potentially accessed its internal systems, leading to a compromise of personal information. This filing, submitted on September 17, 2025, initiates the public record of the breach originating on April 23, 2025.
As an educational and clinical entity, Bastyr University maintains extensive records, including sensitive personal information belonging to students, faculty, and patients. If you received an official data breach notification letter from Bastyr University, it indicates that your personal information was likely among the data affected in this incident. The specific categories of information involved are currently not detailed in the public report.
The current status of this breach is "investigating," meaning authorities and the university are still examining the full scope and impact. It is crucial for recipients of notification letters to carefully review the information provided by Bastyr University. Begin by implementing any recommended actions, such as changing passwords for online accounts and enabling multi-factor authentication where available.
Proactive steps are essential to mitigate the potential risks associated with your exposed information. Regularly monitor your credit reports for any unusual activity and review financial account statements for unauthorized transactions. Be wary of unsolicited communications, as bad actors may attempt to use compromised data for phishing or identity theft.
Individuals who received a notification from Bastyr University regarding this Indiana data breach may have questions about their rights and available recourse. An attorney review can help assess the specific circumstances of your case and provide guidance on potential next steps. There is no cost or obligation to request a review of your situation.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.