Southern Illinois University has confirmed a data breach involving Social Security numbers. So far, only a small out-of-state slice of those affected has been counted publicly.
Southern Illinois University, a public university system based in Illinois, has reported a data breach to the Texas Attorney General. The filing, published August 21, 2026, confirms 1,597 affected Texas residents. Southern Illinois University has not disclosed when the intrusion occurred or when it was discovered.
Source: Texas Attorney General Data Security Breach Reports, Southern Illinois University (published 08/21/2026).
Southern Illinois University is based in Illinois, so the 1,597 affected Texas residents confirmed so far represent an out-of-state fragment of the full picture, not the whole class. The university’s core population, students, faculty, staff, and alumni concentrated in Illinois, has not yet been counted in any public filing. The true total is likely substantially larger than 1,597.
According to the Texas Attorney General filing, the information involved included:
At least 1,597 Texas residents, per the Texas Attorney General’s published filing. Southern Illinois University has not disclosed the total number of affected individuals, including its much larger Illinois-based population.
Southern Illinois University has not publicly disclosed whether it is offering credit monitoring or identity protection services. Anyone who received a notice letter should review it directly for enrollment instructions or contact information.
A Social Security number combined with a name and address is enough for someone to open new credit, apply for government benefits, or file a fraudulent tax return in another person’s name. For students, that risk can persist for years before it’s discovered, since many students don’t monitor credit closely until well after graduation. Affected individuals should watch financial accounts for unfamiliar activity, pull a free credit report, and consider a credit freeze.
Public universities that collect and store Social Security numbers have a legal duty to secure that data and to notify affected individuals without unreasonable delay. Claims against a public university can also involve additional procedural requirements that don’t apply to a private company, so it is worth discussing your options with an attorney promptly.
Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.
Who is affected by the Southern Illinois University data breach?
At least 1,597 Texas residents are confirmed affected through a Texas Attorney General filing. Southern Illinois University’s much larger Illinois-based population of students, faculty, staff, and alumni has not yet been counted in any public filing.
What information was exposed?
Name, address, and Social Security number, according to the Texas Attorney General filing.
Why don’t we know the full number of people affected?
The only public figure so far comes from a Texas Attorney General filing covering Texas residents. Southern Illinois University is based in Illinois, and its Illinois-based population, likely the bulk of those affected, has not yet been disclosed in any state filing reviewed.
Is Southern Illinois University offering credit monitoring?
That has not been publicly disclosed. If you received a notice letter, check it directly for enrollment instructions or contact information.
Are there special rules for making a claim against a public university?
Claims against a public university can involve additional procedural requirements that don’t apply to claims against a private company. These requirements and deadlines can be short, so it’s important to speak with an attorney as soon as possible if you were affected.
Do I have a legal claim?
Public universities that collect and store Social Security numbers have a legal duty to secure that data and to notify affected individuals without unreasonable delay. If you received a notice letter from Southern Illinois University, contact the Data Breach Attorneys at Emery | Reddy at 206.207.8929 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.
Whether you’ve been injured on the job, subjected to mistreatment in the workplace, or affected by a privacy breach, our expert attorneys are here to help.
