Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringIndiana AG filing · September 2, 2026

Point Park University Data Breach 2025 Exposes Student Data

Point Park University recently reported a data breach in Indiana that compromised sensitive personal and student information. If you received a notification letter, your data is at risk, and you may be eligible to explore legal remedies.

This breach is real, not a scam. Point Park University officially reported it to the Indiana Attorney General on September 2, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Point Park University notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Indiana
Breach date
September 19, 2025
Reported
September 2, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Student ID Number
  • Financial Aid Records
  • Transcript and Academic Records
  • Parent or Guardian Information
  • Direct Deposit Account Details
  • Home Address

Point Park University, a prominent higher education institution in Indiana, confirmed a significant data breach occurring on September 19, 2025. This incident was officially reported to state authorities on September 2, 2026, raising serious concerns for past and current students and their families. Universities like Point Park maintain vast databases of personal information as part of their operations, making robust cybersecurity measures essential.

The exposed data categories are extensive and highly sensitive. They include individuals' Full Name, Date of Birth, Social Security Number, Student ID Number, Financial Aid Records, Transcript and Academic Records, Parent or Guardian Information, Direct Deposit Account Details, and Home Address. Such a broad compromise puts affected individuals at heightened risk for identity theft, financial fraud, and targeted phishing scams, as criminals can leverage this detailed profile for various malicious activities.

Educational institutions have a legal obligation to protect the private information entrusted to them. This duty includes implementing advanced security protocols and adhering to federal and state regulations like the Family Educational Rights and Privacy Act (FERPA) and state consumer protection laws. A data breach of this scale suggests a potential failure in these security responsibilities, implying that the university's safeguards may not have been adequate to prevent unauthorized access to personal records.

Receiving a data breach notification letter from Point Park University confirms that your personal data was compromised due to this security incident. This notification establishes your standing to investigate potential legal avenues, including participation in a class action lawsuit. You do not need to prove immediate financial loss; the increased, imminent risk of future identity theft and fraud can be considered a legally recognized injury.

If you were notified about this breach, it's crucial to understand your rights. We are actively monitoring the Point Park University data breach and are available to provide a free, no-obligation case review to help you understand what this incident means for you and whether you have a claim.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases