.png)
Columbia University Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Columbia University data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Columbia University
Columbia University is a private Ivy League research university located in New York City. Established in 1754, it is one of the oldest and most prestigious institutions of higher education in the United States. The university is known for its rigorous academic programs, diverse student body and significant contributions to research and innovation.
Columbia is made up of several undergraduate and graduate schools, including Columbia College, the Fu Foundation School of Engineering and Applied Science, Barnard College and Columbia Business School. The university has a strong presence in entrepreneurship, technology and media, and has produced a large number of successful alumni in various fields.
With more than 16,000 employees and a global reputation for academic excellence, Columbia University serves students from across the country and around the world.
The June 2025 Data Breach
On June 24, 2025, Columbia University experienced a technical outage that disrupted certain IT systems. After launching an investigation with external cybersecurity experts and notifying law enforcement, the university determined that an unauthorized third party gained access to Columbia’s network as early as May 16, 2025. During this breach, the attacker took certain files from the system.
The breach affected a total of 868,969 people in the United States, including 31,660 in Texas, 11,521 in Washington, 1,572 in Iowa and 2,026 in Maine. Columbia notified impacted individuals by U.S. mail on Aug. 7, 2025.
The types of information exposed in this breach include:
- Name
- Address
- Social Security number
- Driver’s license number
- Financial information (such as account numbers, credit or debit card numbers, financial aid-related information)
- Medical information
- Health insurance information
- Date of birth
- Demographic information
- Academic history
- Contact details
- Insurance-related information
- Health information provided to the university
Columbia has stated there is no evidence that Columbia University Irving Medical Center patient records were affected.
Your Rights and Next Steps
If you received a notification from Columbia University about this data breach, it is important to understand your rights and the actions you can take to protect yourself.
First, Columbia is offering two years of complimentary credit monitoring and identity restoration services through Kroll. This service includes credit monitoring, fraud consultation and identity theft restoration. You can enroll by following the instructions provided in the letter from Columbia or by visiting Kroll’s enrollment website.
In addition to enrolling in credit monitoring, consider the following steps:
- Review account statements and credit reports regularly for any unauthorized or suspicious activity
- Place a fraud alert or credit freeze on your credit file with the three major credit bureaus (Equifax, Experian, TransUnion)
- Report any suspected identity theft to law enforcement and your state’s attorney general
- Take advantage of the resources provided by the Federal Trade Commission at identitytheft.gov
Even if you have not noticed any suspicious activity, it is wise to remain vigilant. The types of information exposed in this breach could be used for identity theft or fraud in the future.
Lawyers are ready to help individuals who may have been affected by this data breach. If your information was compromised, you may have the right to seek compensation for any harm or risk you have experienced.
You May Be Entitled to Compensation
If you received a notice from Columbia University or believe your information was involved in this breach, you may be eligible to join a lawsuit and pursue compensation. Lawyers are actively investigating claims related to this incident and can help guide you through the process.
To find out if you qualify and to take the next step, complete the below form to join the lawsuit investigation.
.svg)