[News](/news) Data breach reported for Mortgage Educators and Compliance (360training) [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Data breach reported for Mortgage Educators and Compliance (360training) ##### [UpGuard Team](/team/upguard) February 25, 2026 ### Key Facts: 360training Data Breach * **Date reported:** February 25, 2026. * **Unauthorized access identified:** November 25, 2025 (discovered November 26, 2025). * **Target entity:** 360training (360training.com) / Mortgage Educators and Compliance (MEC). * **Source of breach:** Unauthorized third-party script targeting a payment page. * **Data types:** Customer names, addresses, and credit card numbers (excluding security codes and expiration dates). * **Status:** Confirmed; written notification letters were issued on February 24, 2026, following the completion of the impacted customer list on January 19, 2026. * **Severity:** Medium; the breach involved a malicious script exfiltrating sensitive financial information from nearly 25,000 customers. [Start continuous breach monitoring with UpGuard.](https://www.upguard.com/product/breach-risk/threat-monitoring) ## What happened in the 360training data breach? 360training (360training.com) reported a security incident classified as an external system breach on February 25, 2026. No specific threat actor has been identified in connection with the event. The breach was reportedly discovered on November 26, 2025, after the company detected suspicious activity on the Mortgage Educators and Compliance (MEC) website, which it operates. The investigation determined that an unauthorized party had added a malicious script to the website between November 25 and November 26, 2025. This script was designed to send customers' credit card data to an unauthorized Google Analytics account controlled by the attacker. The incident impacted 24,594 individuals, who were notified of the situation through written correspondence starting on February 24, 2026. While the company reports no evidence of data misuse, the exposure of financial information poses significant risks to the affected user base. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for 360training customers For the 24,594 individuals affected, this breach could lead to potential risks such as identity theft, credential abuse, or targeted phishing attempts. When external systems are compromised, unauthorized parties may gain access to user records which can then be exploited for fraudulent activities. Typical outcomes for organizations include reputational impact and heightened regulatory attention. To protect themselves, individuals should monitor their financial statements and update login credentials for any associated accounts. Proactive transparency regarding security incidents is essential for helping users take the necessary steps to secure their personal information. ## How to protect against similar security incidents Scan your domain for vulnerabilities in minutes ## Frequently asked questions ### What happened in the 360training security breach? On February 25, 2026, 360training (360training.com) disclosed a security breach. According to initial reports, an external system breach involving a malicious script on the MEC website affected a total of 24,594 individuals. ### When did the 360training breach occur? The 360training breach occurred between November 25 and November 26, 2025. It was publicly reported and notifications were finalized in February 2026. ### What data was exposed? The exposed data included customer names, addresses, and credit card numbers. Notably, security codes (CVV), access codes, and expiration dates were not included in the breach. ### Is my personal information at risk? If you purchased courses through the MEC website during the affected period, there's a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts. ### How can I protect myself after this data breach? * Update your 360training password and any other accounts where you used the same credentials. * Update your account passwords immediately * Enable [multi-factor authentication (MFA)](https://www.upguard.com/blog/mfa-multi-factor-authentication) * Monitor your financial and bank accounts for unauthorized transactions * Be cautious of unsolicited emails or text messages * Utilize data leak monitoring tools to stay informed ### What steps should companies take after being impacted by this breach? Companies typically respond by securing the affected systems, notifying impacted individuals, and providing guidance on protective measures. They may also review their internal security protocols and deploy [attack surface management](https://www.upguard.com/product/breach-risk/attack-surface-management) solutions to prevent future incidents. ## How secure is 360training? 360training (360training.com) is a leading American provider of online regulatory-approved training and certification. Founded in 1997 and headquartered in Austin, Texas, the company has evolved into a massive e-learning marketplace serving over 11 million learners across multiple highly regulated industries. * View our free preliminary report on 360training’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View 360training's score](/security-report/360training) [View score](/security-report/360training) [https://360training.com](/security-report/360training) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)