Columbia University Data Breach: Hackers Compromise Personal and Financial Information of 870,000 Individuals
Columbia University has reported a significant cybersecurity incident involving the unauthorised access and extraction of personal and financial data by a third party. The breach was discovered following a technical outage in late June 2025, with the university identifying the incident on June 24, 2025, after disruptions to certain IT systems. An investigation, conducted with the assistance of external cybersecurity experts, revealed that the unauthorised party gained access to Columbia’s network around May 16, 2025, and stole various files. The compromised information includes names, dates of birth, Social Security numbers, and for current and prospective students, additional data such as contact details, demographic information, academic records, financial aid applications, and any health information shared with the university. While there is no evidence that patient records from the Columbia University Irving Medical Center were affected, the breach’s scope is significant, with approximately 2,510 residents of Rhode Island potentially impacted.
In response to the breach, Columbia University is implementing measures to enhance its system security and prevent future incidents. The university is offering two years of complimentary credit monitoring and identity restoration services through Kroll, a risk mitigation firm. Affected individuals are encouraged to enrol in these services and remain vigilant by regularly reviewing their financial statements and credit reports for any suspicious activity. Columbia has established a dedicated call centre to address inquiries related to the incident and has provided guidance on protecting oneself, including placing fraud alerts or credit freezes with major credit reporting bureaus such as Equifax, Experian, and TransUnion. Under U.S. law, consumers are entitled to a free credit report annually from each of these agencies.
Categories: Cybersecurity Incident, Data Breach Impact, Identity Protection Services
Tags: Columbia University, Cybersecurity Incident, Data Breach, Personal Data, Financial Data, Unauthorized Access, Credit Monitoring, Identity Restoration, IT Systems, Fraud Alerts