The Moody Bible Institute of Chicago Data Breach Notice (Massachusetts Attorney General)

The Moody Bible Institute of Chicago has notified 942 Massachusetts residents that their Social Security numbers and driver's license numbers were exposed in a data breach. This filing, submitted on July 31, 2026, means that for those affected, two of the most permanent and valuable identifiers used in identity theft are now outside their control.

Social Security Numbers Cannot Be Replaced

A Social Security number is not like a credit card or password that can be canceled and reissued. Once it is exposed, it remains tied to you for life. Criminals can use it with a driver's license number to open accounts, file fraudulent tax returns, apply for government benefits, or build synthetic identities that mix real and fabricated information. These numbers retain their value for years because they cannot be changed on demand.

The record lists only these two categories for the 942 people: Social Security numbers and driver's license numbers. No passwords were exposed. This is genuinely good news. There is no evidence that login credentials for any Moody Bible Institute account were part of this incident, so you do not need to change any passwords related to this filing.

What the Numbers Enable

With both a Social Security number and a driver's license number, it becomes far easier for someone to impersonate you convincingly. These two pieces of information together can satisfy many verification checks that banks, lenders, and government agencies use. The combination also supports the creation of synthetic identities, where real stolen documents are used to fabricate a person who then builds credit, takes out loans, or claims benefits in someone else's name.

Because the filing does not state when the incident occurred, only when it was reported, the exact timeline remains unclear. What matters now is that these records are out of the organization's hands and in unknown ones.

How to Determine Whether You Are Affected

The Moody Bible Institute of Chicago is required to notify affected individuals directly, usually by mail. If you received a letter from the organization, your information was included in this filing. Absence of a letter usually means you were not in the affected group of 942 Massachusetts residents. However, if you have moved since the incident, letters may have gone to an old address. In that case, contact the Moody Bible Institute directly to confirm whether your records were involved.

The Lifelong Risk of Permanent Identifiers

Unlike a credit card that can be replaced or an email address that can be abandoned, a Social Security number follows you forever. Its exposure does not expire. The same is true for a driver's license number, which can be used to request duplicates, open utility accounts, or support further identity fraud. These are not temporary risks that fade after a few months of monitoring. They require ongoing vigilance.

The scale of this incident — exactly 942 people notified in Massachusetts — is precise. The filing does not disclose whether the data was merely accessed or actually exfiltrated, nor does it name a root cause. Those details remain unknown. What the record does establish is that these two categories of information left the organization's control.

Why Driver's License Numbers Matter Here

A driver's license number is often treated as a secondary identifier, but paired with a Social Security number it becomes a powerful tool for fraud. It can help bypass knowledge-based authentication questions and support requests for official documents. In many states, the number itself is used as a key in government databases. Its exposure alongside an SSN significantly raises the practical risk of tax fraud, loan fraud, and medical identity theft.

No other categories of information appear in this Massachusetts filing. The record does not list financial account numbers, medical records, dates of birth, or any other data. This limits the immediate scope of what was exposed, even as the two named categories carry serious long-term consequences.

Protecting Yourself When Identifiers Cannot Be Changed

Because the core exposed data cannot be replaced, the focus shifts to detection and blocking. Place a freeze on your credit reports at the three major bureaus so new accounts cannot be opened without your explicit permission. This is the single most effective step available. Monitor your tax filings closely each year and respond immediately to any IRS notices about returns you did not file.

Review explanations of benefits from health insurers even if you were not expecting care. Fraudsters sometimes use stolen identities to obtain medical services that later appear on legitimate patients' records. Check your annual credit reports for accounts you do not recognize.

Consider placing an extended fraud alert on your credit files, which requires lenders to verify your identity before issuing new credit. While not as strong as a freeze, it adds an extra verification layer that can catch attempts made with your stolen identifiers.

Finally, be wary of unsolicited calls, texts, or emails that ask you to confirm your Social Security number or driver's license details. Criminals who possess this data often use it to sound legitimate while attempting to extract additional information.

The filing from The Moody Bible Institute of Chicago is narrow but consequential. It contains no passwords and no mention of credentials, yet it places two lifelong identifiers into circulation for 942 Massachusetts residents. The letter you may or may not have received is the only reliable way to know your personal status. For those who were notified, the exposure is permanent and requires sustained attention rather than one-time fixes.