Columbia University security incident history
Hacking, data breaches and other security incidents involving Columbia University, with related coverage.
Columbia University affected by Instructure data breach
↳ Knock-on damage from the Instructure incident · View original incidentColumbia University was affected by the Instructure data breach. Columbia University issued a statement on the incident on 6 May 2026.
Related reports: 2 · last report →Columbia University cyber-attack exposes personal data of about 3.1 million people
3.1mImpact: Personal information of about 3.1 million people
A cyber-attack on Columbia University in June 2025 disrupted IT services and exposed personal information. The number of people affected rose from an initial estimate of about 870,000 to about 3.1 million, and the exposed information included Social Security numbers, financial account details, academic records and medical information. The university agreed to pay US$16.1 million to settle related litigation, and an investigation in October 2026 found no evidence that the stolen information had been sold or distributed on the dark web.
Related reports: 32 · last report →Class action filed over Columbia University sensitive data leak
Impact: Leak of sensitive information
A class action lawsuit was filed after sensitive information was leaked at Columbia University. The lawsuit alleges that the university failed to adequately protect sensitive information.
Read on Top Class Actions ↗