Strategic Education Inc. Data Breach Notice (Washington Attorney General)

The February 23, 2026 breach at Strategic Education Inc. placed your name, Social Security number, driver’s license or Washington ID card number, and passport number in the hands of an unknown party. With 14,112 people affected, this is not a small exposure. The filing reached the Washington Attorney General on June 1, 2026—98 days after the incident itself.

Why the 98-day gap matters

The record shows the incident occurred on February 23 and the notification was filed on June 1. That interval is long enough to stand out. State law sets different clocks depending on when an investigation concludes, so the filing does not label the delay as a failure. It simply records both dates. For anyone whose information was taken, those three-plus months represent real time during which the exposed details could have been used, copied, or packaged for sale.

What each exposed item actually enables

A Social Security number combined with a name and date of birth (often available from other sources) remains one of the most valuable building blocks for identity theft. Criminals can use it to open accounts, file fraudulent tax returns, or create synthetic identities. A driver’s license or Washington ID number adds another government-issued identifier that many financial institutions and government agencies accept as proof of identity. A passport number completes a high-confidence identity package that can be used for new credit applications, government benefits, or even travel under someone else’s name.

These identifiers do not expire. Unlike a credit card or password, you cannot cancel or rotate a Social Security number, driver’s license, or passport on demand. Once they are loose, the risk is permanent. That is the central fact this breach creates for the 14,112 people whose records were included.

No passwords or login credentials were exposed

The filing lists only the four categories above. No passwords, no email addresses tied to accounts, and no financial account numbers appear in the disclosed data. This is genuinely good news. You do not need to change any password connected to Strategic Education Inc. because none was taken. The exposure is limited to the biographic and government identifiers that cannot be replaced.

How to determine whether this filing includes you

Strategic Education Inc. is required to notify affected Washington residents directly, usually by mail to the last known address. If you received a letter, your records were part of the 14,112. If you have not received one, it is likely you were not affected. However, anyone who has moved since February 23, 2026 should contact the organization directly to confirm their status. Absence of a letter is usually meaningful, but a change of address can break the notification chain.

The long-term identity theft risk created by this combination

Having a name, SSN, driver’s license number, and passport number together gives a criminal nearly everything needed to impersonate you convincingly for years. Synthetic identity fraud—building a fake person using real stolen documents from multiple victims—is made substantially easier by exactly this mix. Once established, these identities can be used to drain accounts, accumulate debt, or claim benefits that belong to you. Monitoring alone is not enough; active steps to lock down your records are necessary.

What you can still control

While you cannot retract the data, you can limit what criminals do with it. The most effective protections focus on freezing access, watching for new accounts, and placing alerts that force verification before anything is approved in your name.

Place a freeze with all three major credit bureaus immediately. This stops new credit applications from being approved without your explicit permission. It is free, reversible, and the single most useful step for an SSN breach of this kind. Update the freeze only when you need to apply for new credit yourself.

Set up fraud alerts or extended fraud alerts with the credit bureaus. A fraud alert requires lenders to verify your identity before opening new accounts. An extended alert lasts longer and forces them to contact you directly.

Monitor your credit reports weekly for the next year. Look specifically for accounts or inquiries you do not recognize. The combination of SSN and government ID numbers makes new-account fraud the primary threat.

Contact the IRS and Social Security Administration to flag your records. They can place markers that require extra verification before any tax return or benefit claim is processed under your SSN. This step is often overlooked but directly addresses one of the most damaging uses of stolen SSNs.

If you hold a valid passport, consider whether you need to request a new one. While not always practical, replacing the number removes that specific identifier from the exposed set. Weigh the cost and inconvenience against your individual risk level.

Continue checking Explanation of Benefits statements from any health plans and tax transcripts from the IRS even though medical or tax-specific data was not listed in this filing. Criminals who obtain SSNs frequently test them across multiple government and financial systems.

The realistic outlook

This breach does not mean criminals are actively using your information today. It does mean the information is now available to them indefinitely. The 98-day gap between the February 23 incident and the June 1 filing gave time for the data to move through criminal networks. The people whose records were taken now carry a lifelong increase in identity-theft risk that cannot be undone.

The letter you may have received is the definitive test of whether you are one of the 14,112. For those who are, the practical response is to treat the exposed identifiers as permanently public and lock down every downstream system that still accepts them as proof of identity. Credit freezes, IRS flags, regular monitoring, and prompt dispute of any suspicious activity remain the only tools available once government identifiers leave your control.