Moody Bible Institute Data Breach: What Affected Individuals Need to Know

Moody Bible Institute is a Chicago-based Christian educational institution. In June 2026, threat actors affiliated with the ShinyHunters extortion group targeted the organization in a “pay or leak” campaign. According to Moody’s official disclosure, the institution’s Information Technologies Services team implemented security protocols to address the vulnerability upon discovering the incident, and Moody engaged both internal and external cybersecurity experts to conduct a forensic investigation and notified law enforcement.

The incident was disclosed in June 2026, and it resulted in the public exposure of personal data. ShinyHunters is a data-theft and extortion group known for large-scale data theft and public leak campaigns rather than traditional ransomware encryption. Moody was reportedly among several educational institutions targeted in a coordinated wave of attacks.

According to the exposure catalogued by Have I Been Pwned, over 2.3 million unique email addresses were published publicly, along with names, physical addresses, phone numbers, dates of birth, genders, marital statuses, and other information relating to donors, supporters, students, and alumni. Moody advised in its disclosure notice that it had engaged internal and external cybersecurity experts to investigate the matter.

The threat actor made broader claims about the volume and nature of the stolen data, including figures in the tens of millions of records. Those figures come from the attacker and have not been independently verified. The confirmed, publicly documented exposure centers on the contact and biographical details described above, which — while not always sufficient on their own to enable financial fraud — can fuel targeted phishing and scams.

Because the exposed data relates to donors, supporters, students, and alumni, affected individuals span a wide community connected to Moody Bible Institute. Anyone whose email address, name, address, phone number, or date of birth was in Moody’s systems may be affected.

When contact details and dates of birth are exposed in a public leak, a primary risk is targeted phishing — messages crafted to look legitimate because they reference accurate personal details. Remaining skeptical of unexpected communications that reference Moody or your personal information is an important protective habit.

Be especially alert to phishing emails, calls, and texts that reference Moody Bible Institute or your personal details, and avoid clicking links or sharing information in response to unsolicited messages. Consider using a password manager and enabling multi-factor authentication on your important accounts, particularly if you reused any password associated with an exposed email address.

Monitor your financial and institutional accounts for unauthorized activity, and consider enrolling in identity monitoring or credit protection services if they are offered. If you receive a direct notification from Moody, keep it and follow its instructions. A legal professional can help you understand whether you may have legal options.

Readers following similar incidents can also see our overview of the MBE CPAs data breach lawsuit.