Moody Bible Institute moody.edu Moody Bible Institute data breach: what happened and what to do
In June 2026, Moody Bible Institute was hit by a ShinyHunters extortion campaign, and the group published the data. Have I Been Pwned counts 2.3 million email addresses, with names, phone numbers, addresses and dates of birth of donors, students and alumni.
View all 13,115 breaches- Breach date
- 15 Jun 2026
- Affected
- 2,303,416
- Data exposed
- Dates of birth, Email addresses, Genders, Marital statuses, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
Moody Bible Institute is a Christian college in Chicago. In June 2026 the ShinyHunters group ran a "pay or leak" extortion campaign against it. The college disclosed that it was investigating, and the group later published the data it said it had taken, with a download going up on June 23, according to SC Media.
In its data investigation notice, the college said it had engaged internal and external cybersecurity experts to investigate. CyberInsider reported that the college's technology team addressed a vulnerability and that people were told to monitor their accounts and consider credit freezes and fraud alerts. One account says notice letters began going out on July 23.
How many people
Have I Been Pwned counted 2,303,416 unique email addresses in the published data, about 2.3 million. Before the leak, the group claimed far more records from enrollment, donor relations, payroll and communications systems. Those claims are unverified, and the Have I Been Pwned figure is the one to rely on.
What was exposed
Have I Been Pwned lists names, email addresses, phone numbers, physical addresses, dates of birth, genders and marital statuses. The data relates to donors, supporters, students and alumni, so it reaches well beyond people who studied at the college.
Some outlets report that regulator filings also mention Social Security numbers and driver's license numbers for a smaller group. That is not part of Have I Been Pwned's list, and it is worth checking in any letter you receive from the college.
What that lets criminals do
A donor record with a name, address, phone number and date of birth can be used for identity theft, or to answer the security questions many sites ask. Marital status and affiliation add detail for a convincing story.
The more likely harm is phishing aimed at donors. A message that thanks you for a past gift, or asks you to update a pledge or confirm your alumni profile, will look real because the sender knows your history with the college. Phone numbers also invite text scams.
The company's response
The college says it investigated with outside experts, fixed a vulnerability and notified people. It has not said that the published files were incomplete or that it paid anyone. If you receive a letter, it will set out any monitoring on offer.
If you gave to the college or studied there
You may be in the data even if you haven't heard from the college in years. Search your email on Have I Been Pwned, and be wary of any donation request that arrives unexpectedly.
What to do if you were in it
- 1
Be suspicious of donation and alumni messages
Scammers can quote real details about your giving or studies. Don't pay or update details through a link in a message. Go to the college's own site.
- 2
Freeze your credit if a notice mentions Social Security numbers
Dates of birth and addresses leaked for everyone in the data. A free freeze at Equifax, Experian and TransUnion stops most new accounts in your name.
- 3
Watch for texts and calls
Phone numbers leaked. Don't share verification codes or card details with anyone who contacts you first.
- 4
Read any letter from the college
It lists what was taken for you and any monitoring offered. Use the contact details in the letter, not those in a forwarded message.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data appears. It can't take data out of a breach, but it shows you what leaked and what to do about it.
Frequently asked
Was I affected by the Moody Bible Institute breach?
If you were a donor, supporter, student or alumnus, possibly. Search your email on Have I Been Pwned, which holds 2.3 million email addresses from the published data.
What was exposed?
Have I Been Pwned lists names, email addresses, phone numbers, physical addresses, dates of birth, genders and marital statuses.
Were Social Security numbers exposed?
Have I Been Pwned does not list them. Some press reports say regulator filings mention them for a smaller group. Check any letter you get from the college.
Should I change my password?
Passwords are not listed in the exposed data. If you reuse one across sites, change it anyway and turn on two-factor login.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
