Moody Bible Institute Data Breach (2026): What Was Exposed & What To Do

Inside the incident

In June 2026 Moody Bible Institute was the target of an extortion campaign that resulted in the public release of more than 2.3 million unique email addresses and associated personal data. The published material included names, physical addresses, phone numbers, dates of birth, genders and marital statuses. The institute stated in its disclosure that it had engaged both internal and external cybersecurity experts to investigate.

How a breach like this happens

Extortion campaigns of this type typically begin with unauthorised access to an organisation’s systems or data repositories. Once data are obtained, the operators contact the victim and demand payment in exchange for withholding the material from public release. When payment is not made or negotiations fail, the data are posted on publicly accessible sites or forums. The method of initial entry can vary and often remains undisclosed in the early stages of an investigation.

About Moody Bible Institute

Moody Bible Institute is an educational and religious organisation that maintains relationships with students, alumni, donors and other supporters. Institutions of this kind routinely collect and store contact information, demographic details and giving histories to manage enrolment, communications and fundraising. A compromise at such an organisation therefore affects a wide range of individuals whose records are kept for administrative and outreach purposes.

What was likely exposed

The published data include dates of birth, email addresses, genders, marital statuses, names, phone numbers and physical addresses. These categories were explicitly identified in connection with the incident. No further details on the precise volume of each field or the presence of additional record types have been confirmed publicly.

Why it matters

Exposure of this combination of identifiers can facilitate unsolicited contact, attempts at account takeover and the construction of more convincing fraudulent communications. For an organisation that holds long-term relationships with supporters and former students, the incident also raises questions about the security of records that may remain in use for years. The scale—2.3 million affected individuals—means these risks are distributed across a large population rather than a narrow group.

Were you affected?

Individuals who have been students, donors or supporters of Moody Bible Institute can begin by monitoring their email accounts for unusual activity and reviewing privacy settings on any services that use the exposed addresses. Checking credit reports and placing fraud alerts with major bureaus provides an additional layer of protection against misuse of dates of birth and addresses. Readers may also run a free exposure scan of their email address against known breach data sets to determine whether their information appears in publicly discussed incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.