University of Phoenix, an Arizona online university, disclosed a cybersecurity incident that exposed sensitive data of nearly 3.5 million people. Attackers accessed its Oracle E-Business Suite financial environment via a reported zero-day exploit; the Clop ransomware group claims responsibility. Suspicious activity was detected on November 21, 2025, and consumer data was stolen. Potentially exposed: SSNs, financial records, names, addresses, and other PII. Our firm is reviewing claims for possible federal and state privacy law violations. If you received a breach notice or believe you were affected, contact us for a free consultation.