Bastyr University Data Breach Lawsuit Investigation
Were you one of the 3,500+ people notified by Bastyr University about a data breach? Sensitive personal and medical details may now be in the wrong hands. Act quickly—discover how to protect yourself and see if you qualify for compensation.
What Happened?
On April 30, 2025, Bastyr University detected suspicious activity inside its network. An immediate investigation revealed that an unauthorized party had accessed or exfiltrated data held on certain systems between April 23 – 30, 2025. After months of forensic review, Bastyr confirmed the breach scope on September 2, 2025 and began mailing notification letters to affected individuals on September 17, 2025.
What Information Was Exposed?
The specific data compromised differs by person, but may include any of the following:
- Full name
- Social Security number (SSN)
- Protected health information, such as medical records
Because SSNs and medical files can be used for identity theft and medical fraud, recipients should take action immediately.
Download Official Breach Notice (PDF)
Steps for Affected Bastyr University Students & Patients
Below are recommended actions to safeguard your identity and legal rights:
- Enroll in the complimentary credit monitoring offered by Bastyr University as soon as possible.
- Place a free fraud alert or credit freeze with the three major credit bureaus.
- Review Explanation of Benefits (EOB) statements for unfamiliar medical services.
- Change online account passwords—especially those linked to healthcare portals.
- Watch for phishing emails that may reference the breach to trick you into revealing more data.
- Consult with a data-breach attorney to evaluate potential claims for monetary damages.
Can You File a Bastyr University Data Breach Lawsuit?
If evidence shows Bastyr University failed to use reasonable cybersecurity measures, impacted individuals could seek damages for:
- Out-of-pocket expenses (credit monitoring, professional fees)
- Time spent addressing identity theft risks
- Emotional distress
- Future risk of identity fraud
Eligibility varies by state and the specific data compromised. Speaking with counsel familiar with healthcare-related breaches can clarify your legal options.
About Bastyr University
Bastyr University is a private institution in Kenmore, Washington, specializing in natural health sciences. Established in 1978, the university offers programs in naturopathic medicine, acupuncture, nutrition, midwifery and related disciplines, and employs more than 200 staff members.
Frequently Asked Questions about the Bastyr University Data Breach
When did Bastyr University's data breach occur?
The unauthorized access happened between April 23 and April 30, 2025, with discovery on April 30, 2025.
How many people were impacted by the Bastyr University breach?
More than 3,500 individuals received notification letters.
What personal information was compromised in the Bastyr University breach?
Potentially names, Social Security numbers, and medical records.
Has Bastyr University offered free credit monitoring?
Yes. Notification letters include instructions to enroll in complimentary credit monitoring services.
Can I sue Bastyr University for the data breach?
Possibly. Victims may pursue legal claims if negligence led to the breach. Consult a qualified attorney to assess your case.