Strategic Education Inc., the parent company of Strayer University and Capella University, has notified individuals about a data security incident involving unauthorized access to its computer network. According to the notice, an unauthorized actor accessed company servers between February 23, 2026 and February 25, 2026, and copied certain files during that window. This falls into the category of a hacking or system intrusion, meaning someone outside the organization broke into its systems rather than the incident stemming from a lost device or an employee mistake. Strategic Education says it secured its network after discovering the incident and has since added measures meant to strengthen its IT security going forward.
The letter is addressed to a specific individual whose name appeared in the affected files, and the version provided to BreachLetter does not include an aggregate number of people affected. If you received this letter, it means your information was among the files reviewed by the company as part of its investigation, which concluded on May 21, 2026.
What information was exposed?
- Full name
- Social Security number
- Driver’s license number
- Passport number
Strategic Education is offering a complimentary membership in identity monitoring services through Kroll, covering single bureau credit monitoring, unlimited fraud consultation, and identity theft restoration support. To activate, visit https://enroll.krollmonitoring.com and enter the Membership Number printed on your individual letter; the letter references an activation deadline but the specific date was not included in the text provided to us, so check your physical notice for that detail.
What should you do now?
- Activate the free Kroll identity monitoring membership using the enrollment link and Membership Number in your letter, and do so before whatever deadline is printed there.
- Because your Social Security number, driver’s license number, and passport number may have been exposed, consider placing a security freeze with Equifax, Experian, and TransUnion, which is free and prevents new accounts from being opened in your name without your permission.
- Place an initial fraud alert on your credit file, which lasts one year and only needs to be requested at one bureau.
- Review your credit reports regularly, using your free annual reports from www.annualcreditreport.com, and watch for accounts or inquiries you don’t recognize.
- Since a passport number was involved, contact the U.S. State Department if you notice any signs that your passport information is being misused, since replacing a passport is a separate process from credit-related fixes.
- Consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere and help you respond quickly if something looks wrong.
- If you spot suspicious activity, file a report with local law enforcement and the FTC at www.identitytheft.gov, and keep a copy of any police report in case creditors ask for it.
If you have questions, Strategic Education Inc. can be reached at (844) 959-7093, Monday through Friday, 8:00 am to 5:30 pm Central Time, excluding major US holidays.