In a significant legal development, a class action lawsuit has been filed against a prominent for-profit university over allegations of failing to protect sensitive personal information. The lawsuit, brought by plaintiffs Mari Soliz and Denise Rico, was filed in the United States District Court for the District of Arizona on December 4, 2025. It accuses the University of Phoenix of negligence and other violations related to a data breach that compromised the personal identifiable information (PII) of thousands.
The complaint alleges that on November 21, 2025, the University of Phoenix detected a cybersecurity incident involving its Oracle E-Business Suite software platform. This breach allowed unauthorized third parties to exploit a software vulnerability and exfiltrate sensitive PII, including names, contact information, dates of birth, social security numbers, and bank account details. The plaintiffs argue that this breach was a direct result of the university’s failure to implement adequate security measures despite being aware of the risks posed by cyber threats in the education sector. “Defendant was fully aware that the education industry is a prime target for cyber threats,” states the complaint.
The plaintiffs are seeking damages for negligence, negligence per se, and unjust enrichment. They argue that due to the university’s lax security protocols, they now face an increased risk of identity theft and fraud. Furthermore, they claim that their PII has been made available on dark web platforms used by cybercriminals. The lawsuit also seeks injunctive relief requiring the University of Phoenix to adopt more stringent data protection practices to prevent future breaches.
Represented by attorneys Russell S. Thompson IV from Thompson Consumer Law Group PC and Christian Levis from Lowey Dannenberg PC among others, Soliz and Rico demand not only monetary compensation but also structural changes within the university’s data management systems. They request that lifetime credit monitoring services be provided to all affected individuals as part of any settlement or judgment awarded by Judge DJH under Case ID 2:25-cv-04522-DJH.
Source: 225cv04522_Soliz_v_The_University_of_Phoenix_Inc_Complaint_District_Arizona.pdf
