Columbia University data breach impacts nearly 870,000 individuals | Bleeping Computer

According to the letters sent to affected individuals via the U.S. Postal Service, the stolen data includes a combination of personal, financial, and health information.

"The affected data included your name, date of birth, and Social Security number, as well as any personal information that you provided in connection with your application to Columbia, or that we collected during your studies if you enrolled," the university added.

"This included your contact details, demographic information, academic history, financial aid-related information, and any insurance-related information and health information that you shared with us."

While Columbia University has no evidence that the data has been misused in identity theft or fraud attempts, it will provide two years of free credit monitoring, fraud consultation, and identity theft restoration services through Kroll to those impacted by this data breach.

​An unknown threat actor has stolen the sensitive personal, financial, and health information of nearly 870,000 Columbia University current and former students and employees after breaching the university's network in May.

Established in 1767 as King's College, Columbia University is a private Ivy League research university with a budget of $6.6 billion in 2024, over 20,000 employees, including 4,700 academic staff, and over 35,000 enrolled students across 19 schools and special programs.

The breach was discovered and reported to law enforcement authorities following an outage that affected some of its systems on June 24, following an investigation with support from external cybersecurity experts.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 

Latest Articles

• 
  Security

  FTC: older adults lost record $700 million to scammers in 2024

  Americans aged 60 and older lost a staggering $700 million to online scams in 2024, marking a sharp rise in fraud targeting seniors, according to the Federal Trade Commission.

  • Bill Toulas
  • August 08, 2025
  • 01:55 PM
  • 0
• 
  Security, Legal

  U.S. Judiciary confirms breach of court electronic records service

  The U.S. Federal Judiciary confirms that it suffered a cyberattack on its electronic case management systems hosting confidential court documents and is strengthening cybersecurity measures.

  • Bill Toulas
  • August 08, 2025
  • 11:30 AM
  • 1

Security

CISA orders fed agencies to patch new Exchange flaw by Monday

CISA has issued an emergency directive ordering all Federal Civilian Executive Branch (FCEB) agencies to mitigate a critical Microsoft Exchange hybrid vulnerability tracked as CVE-2025-53786 by Monday morning at 9:00 AM ET.

• Lawrence Abrams
• August 07, 2025
• 04:14 PM
• 0