University of Utah Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating the University of Utah regarding its recent data breach. The University of Utah data breach involved sensitive personal identifiable information belonging to over 13,000 current or former students, employees, and donors.


The University of Utah is a public research university providing undergraduate and graduate degree programs. Accordingly, the University of Utah offers more than 72 undergraduate majors and over 90 graduate areas of study, ranging from art history to metallurgical engineering. With 16 athletic facilities, the University of Utah is a member of the PAC-12 athletic conference and invests in a variety of student organizations, including intramural sports, outdoor adventures, personal training, and more. Founded in 1850, the University of Utah prides itself as the flagship educational institution of the Utah System of Higher Education. Located in Salt Lake City, the University of Utah operates 2 additional campuses in South Korea and Ghana to serve 35,000 students from across the globe.


On June 29, 2023, the University of Utah discovered that TIAA Kaspick, a third-party vender used by the University of Utah, experienced a data breach in which the sensitive personal identifiable information of University of Utah students, employees, and donors may have been accessed. Through its investigation, the University of Utah determined that an unauthorized actor may have accessed this sensitive information through a cyber-attack on the MOVEit file transfer software used by TIAA Kaspick at the end of May 2023. Recently, the University of Utah began contacting individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number
  • Date of birth

If you are a current or former student, employee, or donor of the University of Utah:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the University of Utah data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review any breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by the University of Utah;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: