University of Hawai‘i $3.5M Data Breach Class Action Settlement

Individuals who received notification that the August 2025 University of Hawai‘i data breach may have compromised their private information could be eligible to submit a claim for up to $5,000 from a class action settlement. The cybersecurity incident impacted approximately 1,200,000 people.

The University of Hawai‘i agreed to pay $3.5 million to settle a class action lawsuit alleging it failed to adequately protect private information during a data breach in August 2025. The plaintiffs claimed unauthorized access to certain servers at the University of Hawai‘i Cancer Center exposed sensitive information, such as names, Social Security numbers, driver’s license numbers and research-related data.

Who can file a claim for a data breach payout?

Class members are individuals in the United States whom the University of Hawai‘i notified that the August 2025 data breach potentially compromised their private information.

How much are settlement payments?

Class members have the following benefit options:

• Cash payment A – Extraordinary documented losses: Class members can claim up to $5,000 per class member for documented, unreimbursed monetary losses reasonably related to the data breach.
• Cash payment B – Alternate cash: Class members who do not submit a documented losses claim can submit a claim to receive an estimated $50 cash payment. The settlement administrator will determine the final payment amount by the total number of claims filed.
• Medical data monitoring: All class members can elect to receive one year of CyEx’s Medical Shield Pro medical data monitoring service

How to claim a class action rebate

To receive a settlement benefit, class members can file a claim online or print and complete the PDF claim form and mail it to the settlement administrator.

Settlement administrator's mailing address: University of Hawai‘i Data Incident Settlement Administrator, P.O. Box 3719, Portland, OR 97208-3719

The claim deadline is Nov. 2, 2026.

Required proof and claim information

• To submit a claim online, claimants must provide the unique ID from the settlement notice they received.
• To submit a documented losses claim, claimants must provide supporting documentation, such as receipts, bank or credit card statements, or other records showing unreimbursed losses directly related to the data breach.

Payout options

• PayPal
• Venmo
• Zelle
• Digital Mastercard
• Paper check mailed to the address provided

Settlement fund breakdown

The $3,500,000 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys’ fees: Up to $1,166,666.67 plus reimbursement of litigation costs
• Service awards to class representatives: Up to $2,000 each
• Medical data monitoring: Cost determined by number of claims filed
• Payments to eligible claimants: Remaining settlement funds

Important dates

• Deadline to opt out: Oct. 19, 2026
• Deadline to file a claim: Nov. 2, 2026
• Final approval hearing: Nov. 4, 2026

When is the University of Hawai‘i data breach settlement payout date?

The settlement administrator will distribute payments after the resolves any appeals and grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit claimed a third party unlawfully accessed servers at the University of Hawai‘i Cancer Center, exposing sensitive private information. The plaintiffs alleged the university failed to adequately protect this data.

The university denies any wrongdoing but agreed to settle to avoid the uncertainty and expense of further litigation.

Sources

1. Settlement notice
2. Settlement claim form
3. Settlement website FAQ page