Columbia University data breach
Columbia University appears in 10 breach notices filed with Texas AG, New Hampshire DOJ, Rhode Island AG, Iowa AG, California AG, Washington AG, Oregon DOJ, Montana DOJ and SC Consumer Affairs, most recently reported on May 20, 2026.
Claim by Jan 21, 2027 · 85 days left
Who qualifies: US residents who were sent notice that their information was compromised in Columbia University's May 2025 cyberattack. Do I qualify?
File a claim on the official site ↗ Settlement detailsBreach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| May 20, 2026 | Texas AG | May 16, 2025 – Jun 24, 2025 | 161,544 Texas residents | Name of individualAddressSocial Security Number InformationDriver’s License numberGovernment-issued ID number (e.g. passport, state ID card)Financial Information (e.g. account number, credit or debit card number)Health Insurance InformationOtherDate of Birth | Texas AG list ↗ |
| May 7, 2026 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Aug 26, 2025 | Rhode Island AG | Not listed | Not listed | Not listed | Notice ↗ |
| Aug 12, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Aug 8, 2025 | Iowa AG | Not listed | Not listed | Not listed | Notice ↗ |
| Aug 7, 2025 | California AG | May 16, 2025, Jun 24, 2025 | Not listed | Not listed | California AG list ↗ |
| Aug 7, 2025 | Washington AG | May 16, 2025 – Jun 24, 2025 | 54,075 Washington residents | Health Insurance Policy or ID NumberMedical InformationNameSocial Security NumberDriver's License or Washington ID Card NumberFinancial & Banking InformationFull Date of BirthStudent ID Number | Washington AG list ↗ |
| Aug 7, 2025 | Oregon DOJ | May 16, 2025 – Jun 24, 2025 | 868,969 Oregon residents | Not listed | Oregon DOJ list ↗ |
| Aug 7, 2025 | Montana DOJ | Jun 24, 2025 | 4,083 Montana residents | Not listed | Notice ↗ |
| Aug 7, 2025 | SC Consumer Affairs | Not listed | 13,393 South Carolina residents | Not listed | Notice ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.