Columbia University settles $16.1M lawsuit over 2025 data breach

Columbia University has opened the claims process for a $16.1 million settlement following a June 2025 cyberattack. The breach compromised the personal information of approximately 870,000 to 3.1 million applicants and affiliates, including Social Security numbers, financial aid data, academic histories, and medical information.

An internal investigation by Columbia University Information Technology concluded that the attack was politically motivated rather than financially driven, finding no evidence that the stolen data was sold or distributed on the dark web. Reports indicate the hacker sought evidence regarding the university’s use of affirmative action in admissions.

Affected individuals are eligible for cash payments, credit monitoring, and identity-theft restoration services. The court-appointed claims administrator, Angeion Group LLC, will contact impacted individuals with instructions. The deadline to submit claims is January 21, 2027.