Monmouth University monmouth.edu Monmouth University data breach 2026: what happened and what to do
Monmouth University said files were accessed or taken beginning around February 5, 2026. Depending on the person, they could include Social Security numbers, ID numbers, financial and medical information and passwords. The total affected hasn't been published.
View all 13,115 breaches- Breach date
- 5 Feb 2026
- Made public
- 30 Jun 2026
- Data exposed
- Names, Dates of birth, Social security numbers, Driver's licenses, Government issued IDs, Financial account numbers, Credit cards, Medical treatment information, Health insurance information, Usernames, Passwords
- Last updated
What happened
Monmouth University in New Jersey said it learned on March 3, 2026 that an unauthorized third party may have accessed some of its data. A forensic investigation found that files were accessed or taken without authorization beginning on or about February 5, 2026. On May 29, 2026 the university determined that the files could contain personal information, and it began notifying people. The breach then appeared on state attorney general notification lists, including Massachusetts and California.
The university hasn't published a total number of people affected. State filings show at least 842 Massachusetts residents, 322 Texas residents, 217 New Hampshire residents and 116 Vermont residents, but those are single-state counts and the total is higher. A group called PEAR claimed to have taken 16 terabytes of data. The university has not confirmed that figure.
What was exposed
The notice says the files could contain, depending on the person: name, date of birth, Social Security number, driver's license or state ID number, passport number, financial account number, payment card information, medical treatment or diagnosis information, health insurance information, and username and password.
That is a long list, and it covers more than students. Universities hold records on applicants, employees, alumni and patients at campus clinics, which is why the data types range from financial to medical.
What it means for you
A Social Security number with a date of birth is the core of identity theft. It can be used to open credit, file a fake tax return or claim benefits, sometimes years after the breach. A credit freeze is the single most effective step.
Health insurance and treatment information is used for medical identity theft and for convincing phishing. A call that mentions your real insurer or diagnosis sounds legitimate. Do not confirm details to anyone who phones you.
Usernames and passwords in the data mean any account that shares that password is at risk. If you reuse passwords, change them.
What Monmouth has said
The university says it has no evidence that the information has been misused to commit fraud or identity theft. It is offering a complimentary one-year membership in Experian IdentityWorks credit monitoring. Details and the enrollment code are in your notice letter.
Check your own exposure
Your letter is the main source. A free Serus scan also checks whether your email and phone number appear in breaches, and Serus keeps watching and alerts you to new ones. Serus can't remove data from a breach.
Why there are several dates
Sources differ on when the breach was reported, because there are separate dates for when the attack happened, when the university noticed, when it worked out whose data was involved and when letters went out. The February 5 date is when the investigation says files were first accessed. March 3 is when the university learned of it, and May 29 is when it identified personal information in the files. Letters followed after that.
What to do if you were in it
- 1
Freeze your credit
Freezing your credit at Equifax, Experian and TransUnion is free and stops anyone opening new credit in your name. You can lift it when you need to apply for something. This matters most if your Social Security number was in the notice.
- 2
Enroll in the credit monitoring offered
Monmouth is offering one year of Experian IdentityWorks. The enrollment code and deadline are in your letter.
- 3
Change reused passwords
If your Monmouth username and password were in the data, change that password and any other account that uses it. Turn on two-factor login.
- 4
Check medical and insurance statements
Review explanations of benefits for services you didn't use, and don't confirm insurance or diagnosis details to unexpected callers.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see where your email and phone number have been exposed, and get an alert when they appear in a new breach.
Frequently asked
Was I affected by the Monmouth University breach?
The university is notifying people by letter. If you were a student, applicant, employee or patient, watch for one, and check the state notification lists if you want to confirm the incident.
What was exposed?
Depending on the person: name, date of birth, Social Security number, driver's license or state ID, passport number, financial account number, payment card information, medical treatment or diagnosis information, health insurance information, and username and password.
How many people were affected?
No total has been published. State filings show at least 842 residents of Massachusetts, 322 of Texas, 217 of New Hampshire and 116 of Vermont.
Is there free credit monitoring?
Yes. The university is offering a complimentary one-year Experian IdentityWorks membership to people who were notified.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
