Kaplan North America Data Breach
The 2025 Kaplan North America data breach affected 1,403,060 people according to the Indiana Attorney General's report. The official notice confirms that an unauthorized person accessed Kaplan's servers and took certain files.
Exposed Data Types
3- Names
- Social security numbers
- Driver's license numbers
About This Breach
Kaplan North America is a U.S.-based education company that provides test preparation, professional training, and other learning services.
How Did the Incident Occur?
The investigation found that an unauthorized person accessed Kaplan's computer servers between October 30 and November 18, 2025, and took certain files. The company secured its network, began an investigation with external IT security specialists, and alerted law enforcement. The file review identified the affected personal information on February 21, 2026; notifications were sent on March 17, 2026.
What Information Was Affected?
The information varied by person. The official notice says the affected files contained names together with Social Security numbers and/or driver's license numbers. It does not state that both identification numbers applied to every affected person.
How Did Kaplan Respond?
Kaplan secured its network, investigated with external IT security specialists, and alerted law enforcement. The company said it implemented additional network-security measures and offered affected people one year of complimentary credit monitoring and identity-theft restoration services.
What Should Affected People Do?
Notice recipients should check their letters for the enrollment terms of the complimentary monitoring service and regularly review credit reports for accounts or applications they do not recognize. People whose Social Security numbers or driver's license information were involved may consider a fraud alert, credit freeze, or tax identity-protection PIN based on their circumstances and should not automatically trust links in unexpected messages referring to Kaplan or a credit bureau.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information