Columbia University hack exposes personal data of about 3.1 million people
A cyberattack on Columbia University in June 2025 disrupted IT services and exposed personal information. The number of people affected rose from an initial estimate of about 870,000 to about 3.1 million, and the exposed information included Social Security numbers, financial account details, academic records, and medical information. The university agreed to pay $16.1 million to settle related litigation, and an investigation in October 2026 found no evidence that the stolen information had been sold or distributed on the dark web.
Key facts
- Affected organization
- Columbia University
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of about 3.1 million people
- Cause / method
- Cyberattack and data theft by a politically motivated attacker
- Location
- United States
If your data was exposed
Exposed dataBank accountHealth & medical dataUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- An IT outage affected key student services, raising the possibility of a cyberattack.
- The university said data had been stolen in the attack that caused the IT outage.
- The exposure of personal information belonging to about 870,000 people was reported.
- The university agreed to a $16.1 million settlement in litigation over the June 2025 breach.
- The university’s investigation found no evidence that the stolen information had been sold or distributed on the dark web.
- The increase in the number of people affected to about 3.1 million and the opening of settlement claims were reported.
32 related reports
- Columbia University hit by possible ‘cyberattack’ as IT outage impacts key student services
- Potential Cyberattack Scrambles Columbia University Computer Systems (Published 2025)
- Cyberattack disrupts networks at Columbia University
- Columbia data stolen in cyberattack that caused dayslong IT outage, University says
- Columbia Cyberattack Appears Politically Motivated, University Says (Published 2025)
- Hacker with ‘political agenda’ stole data from Columbia, university says
- 'Hacktivist' steals data of Columbia University students, employees in politically motivated cyberattack
- Columbia University student data stolen by politically motivated hacker, university says
- Columbia to notify individuals who had data stolen in June cyberattack
- Hacked Columbia University Data Includes Banking Numbers, GPAs
- Columbia U. confirms cyberattack compromised student, employee data
- Columbia University Data Breach Impacts 860,000
- Columbia University says hacker stole SSNs and other data of nearly 900,000
- Columbia Hack Affected 870,000 People, Included Some Health Data
- Major breach sees 460 GB of sensitive data stolen from Columbia University
- 콜롬비아대 해킹으로 87만명 개인정보 유출…핵티비스트 소행
- Hack at Columbia University Hits 870K People
- Columbia University data breach leaks about 460GB of information
- Columbia University Cyber Attack Compromised SSNs, Other Data
- Columbia University warns community about personal information stolen months after ‘politically motivated’ hack
- My SSN was exposed in a breach at Columbia—a school I have no connection with
- Columbia’s Data Breach Exposes Hidden Victims Who Never Attended the University
- A Small Click, A World of Access: Spectator Editorial Board on Columbia’s data breach
- Columbia to settle June 2025 data breach lawsuit for $16.1 million
- Columbia University Agrees to $16 Million Data Breach Settlement
- Columbia investigation finds no evidence data stolen in 2025 cyberattack was sold, distributed on dark web
- Columbia University data breach settlement offers up to $8,500 to those eligible
- Columbia University Opens Claims for $16 Million Data Breach Settlement
- Update: Millions of AT&T customers eligible for payouts in data breach settlement
- Columbia University to pay $16.1M to settle cyberattack lawsuit
- Columbia Opens Claims for $16 Million Data Breach Settlement
- Columbia University Opens Claims for 3.1M Affected by Data Breach
Other incidents at Columbia University
Columbia University affected by Instructure data breach
↳ Knock-on damage from the Instructure incident · View original incidentColumbia University was affected by the Instructure data breach. Columbia University issued a statement on the incident on May 6, 2026.
Related reports: 2 · last report →Class action filed over Columbia University sensitive data leak
Impact: Leak of sensitive information
A class action lawsuit was filed after sensitive information was leaked at Columbia University. The lawsuit alleges that the university failed to adequately protect sensitive information.
Read on Top Class Actions ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.