v3.26.1
Commitments and Contingencies
9 Months Ended
May 31, 2026
Commitments and Contingencies Disclosure [Abstract]  
Commitments and Contingencies

Note 14. Commitments and Contingencies

Guarantees

We have indemnified officers and directors and certain affiliates from losses and other amounts arising from certain events or occurrences. The maximum potential amount of future payments we could be required to make under these indemnification agreements is unlimited; however, we have liability insurance that mitigates our exposure and enables us to recover a portion of any future amounts paid. The fair value of these indemnification agreements, if any, cannot be estimated.

Sponsorship Rights Agreement

In August 2018, PEOC entered into an agreement for sponsorship rights on a stadium in Glendale, Arizona, which is the home of the Arizona Cardinals of the National Football League. The agreement term is in effect until 2030 with options to extend. Pursuant to the agreement, PEOC was required to pay $1.5 million for the initial contract year, which was set to increase 3% per year until 2030. In December 2025, PEOC amended the Sponsorship Rights Agreement to, among other things, lower the annual increase from 3% to 1.5% for the remaining contract term. As of May 31, 2026, our remaining contractual obligation pursuant to the agreement, as amended, was approximately $9 million.

Letter of Credit

As of May 31, 2026, we had a $28 million outstanding letter of credit under our Revolving Facility supporting a sublease. This letter of credit was issued during the third quarter of fiscal year 2026 to replace a cash collateralized letter of credit. The replacement released the cash collateral supporting the prior letter of credit, thereby reducing restricted cash and availability under the Revolving Facility.

Surety Bonds

Our insurers issue surety bonds that are required by various states where we operate, or that are required for other purposes. We are obligated to reimburse our insurers for any surety bonds that are paid. As of May 31, 2026, the face amount of these surety bonds was less than $1 million.

Litigation and Other Matters

We are subject to various claims and contingencies that arise from time to time in the ordinary course of business, including those related to regulation, litigation, business transactions, employee-related matters and taxes, among others. We do not believe any of these are material for separate disclosure and we do not believe any of these, individually or in the aggregate, will have a material effect on our consolidated financial position, results of operations or cash flows.

The following is a description of pending litigation, settlements, and other proceedings that fall outside the scope of ordinary and routine litigation incidental to our business.

Cybersecurity Incident

We experienced a cybersecurity incident involving the Oracle E-Business Suite software platform (“Oracle EBS”). We are one of a number of organizations, including other academic institutions, from which an unauthorized third-party exfiltrated data by exploiting a previously unknown software vulnerability in Oracle EBS. The incident has not impacted our business operations or student programming.

Upon detecting the incident on November 21, 2025, we promptly took steps to investigate and respond with the assistance of leading third-party cybersecurity firms. While the investigation remains ongoing, we believe that the software vulnerability was used in August 2025 to copy certain data maintained in our Oracle EBS environment. We promptly installed Oracle EBS software patches to remediate the vulnerability following their release in October 2025. We believe that certain personal information, including names and contact information, dates of birth, social security numbers, and bank account and routing numbers, with respect to numerous individuals was accessed without authorization. To our knowledge, the unauthorized third-party has not publicly disseminated the data. We are continuing to review the impacted data and are providing the required notifications to affected parties and applicable regulatory entities and also implemented measures to enhance security and reduce the risk of a similar incident occurring in the future.

In connection with this cybersecurity incident, putative class action lawsuits have been filed in which the University is a co-defendant with Oracle and other companies. All of these lawsuits have been consolidated into a single matter, along with other lawsuits against unrelated defendants which stem from the same Oracle EBS software vulnerability discussed above. This consolidated putative class action is titled In re Oracle Corporation Data Breach Litigation and is pending in federal court in the Western District of Texas (Case No. 1:25-cv-01805).

The complaint generally alleges that the University and other co-defendants failed to protect the plaintiffs’ confidential information in violation of various federal and/or state laws. The University (along with the other co-defendants) filed motions to dismiss in June 2026, which remain pending before the court.

Because of the many questions of fact and law that may arise, the outcome of this legal proceeding is uncertain at this point. Based on information available to us at present, we cannot reasonably estimate a range of loss, if any, for this action and, accordingly, we have not accrued any liability associated with this action.

During the nine months ended May 31, 2026, we recorded $5.1 million of expense associated with this cybersecurity incident that is included in strategic alternatives, restructuring and other on our condensed consolidated statements of income. The expense principally represents costs to notify the affected parties, fees from third-party cybersecurity firms, and legal fees related to the incident response and litigation defense. Although we expect to incur additional expenses related to this event in future periods, we maintain a comprehensive cybersecurity insurance policy, which covers costs associated with the incident response, investigatory and remediation

expense, potential regulatory action, business interruption, and costs associated with investigating, defending, and resolving legal proceedings related to the incident, subject to deductibles, exclusions and limits.

Class Action Lawsuit

On April 1, 2025, Janielle Dawson filed a class action complaint against the University in the United States District Court for the Northern District of Illinois. The complaint alleges that the University violated the Video Privacy Protection Act, Electronic Communications Privacy Act, and the Illinois Eavesdropping Act by integrating third-party tracking technology in its website and thereby disclosing to third parties its users’ personally identifiable and other protected information. The complaint seeks damages on behalf of the plaintiff and other members of the class.

During the second quarter of fiscal year 2026, we filed a motion to dismiss this matter, which the court granted in part and denied in part. Subsequently, the parties mutually agreed to explore resolution of this matter via mediation. Mediation occurred in June 2026 and concluded without resolution. Following mediation, the parties have continued settlement discussions and have made substantial progress toward a potential resolution; however, no term sheet, settlement agreement or other binding agreement has been executed, and any proposed settlement would remain subject to the negotiation and execution of definitive documentation and any required court approval. Discovery remains stayed.

Because of the many questions of fact and law that may arise, the outcome of this legal proceeding is uncertain at this point. We have accrued an immaterial amount representing our estimate of probable loss associated with this matter. It is reasonably possible that the ultimate resolution of this matter could result in a loss in excess of the amount accrued; however, based on information available to us at present, we do not believe that any such additional loss would be material to our consolidated financial position, results of operations or cash flows.