Data Breach Summary
Columbia University has confirmed a significant cybersecurity breach that has impacted nearly 870,000 individuals, including current and former students, staff, and other affiliated persons. The breach, which occurred in mid-May 2025, was only uncovered on July 8, 2025, following a series of technical disruptions within the university’s IT systems.
The breach began on May 16, 2025, when an unauthorized third party gained access to the university’s network. A technical outage on June 24, 2025, affected several of Columbia’s IT systems, prompting the university to launch an internal investigation. By July 8, the breach had been confirmed, and the university initiated notifications to the affected individuals.
While there have been no reports of identity theft or fraud linked to this breach, the university is offering affected individuals two years of free credit monitoring and identity restoration services through Kroll, a global leader in risk mitigation.
Kroll’s services include credit monitoring, fraud consultation, and identity theft restoration, which are designed to help individuals manage the aftermath of the breach. Columbia University has provided detailed instructions for individuals on how to activate these services.
A total of 868,969 individuals have been affected by the breach, including a number of Maine residents. Specifically, 2,026 residents of Maine had their personal information compromised as part of the incident. Since the number of affected individuals in the state exceeds 1,000, Columbia University has informed consumer reporting agencies in compliance with state laws.
The breach exposed a range of sensitive personal information, including:
Names
Dates of birth
Social Security numbers
Contact details
Demographic information
Academic records
Financial aid-related information
Insurance data
Health information provided during enrollment
However, the university has clarified that no medical records from the Columbia University Irving Medical Center were impacted by the breach.
If you believe your information may have been compromised due to this breach, it is critical to stay vigilant. We recommend the following actions:
Review your account statements and health benefit summaries for any discrepancies.
If you spot suspicious activity, immediately report it to your healthcare provider, financial institution, or the respective authorities.
Consider placing a fraud alert or a security freeze on your credit reports to prevent identity theft.
If you’ve received a notification regarding this breach or suspect your data was compromised, you might be eligible for compensation. Class Action U, in partnership with Kopelowitz Ostrow P.A., is investigating potential claims related to the breach. This class action lawsuit could provide monetary compensation and ensure that proper safeguards are implemented to protect your information moving forward.
If you believe your rights have been violated, joining a class action lawsuit could help amplify your voice and hold Columbia University accountable for the breach. Contact us today for a free consultation to discuss your legal options.
©2024 ClassActionU
