[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3jt7jumcryzga":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":19,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":19,"affectedCountUnit":21,"hasEnglishDescription":4,"severity":22,"dataClasses":23,"description":29,"seoTitle":30,"seoTitleEn":8,"seoDescription":30,"seoDescriptionEn":31,"logoUrl":32,"isVerified":4,"isSensitive":4,"isSpamList":33,"isMalware":33,"company":34},"6a719444a135a941752763a4","UniversityOfHawaiiCancerCenter2025","University of Hawaiʻi Cancer Center 2025 Data Breach","university-of-hawaii-cancer-center-2025","hawaii.edu","2025-08-31T00:00:00.000Z","2026-08-04T07:27:00.434Z","2026-08-04T07:31:36.683Z","University of Hawaiʻi Cancer Center official cyberattack notice","https:\u002F\u002Fwww.hawaii.edu\u002Fnews\u002F2026\u002F02\u002F27\u002Fnotice-of-cyberattack-uh-cancer-center\u002F",[15,17,18],"https:\u002F\u002Fwww.hawaii.edu\u002Fgovrel\u002Fdocs\u002Freports\u002F2026\u002Fhrs487n-4_2026_cancer-center-exposure_report_508.pdf","https:\u002F\u002Ftherecord.media\u002Funiversity-of-hawaii-ransomware-data-breach",null,"unknown","people","Unknown",[24,25,26,27,28],"Names","Dates of birth","Social security numbers","Driver's license numbers","Medical information","\u003Cp>\u003Cstrong>The University of Hawaiʻi Cancer Center 2025 data breach\u003C\u002Fstrong> was a ransomware attack affecting research servers in the Center's Epidemiology Division. The University identified the incident on 31 August 2025 and said certain research files were encrypted and may have been copied by an unauthorised party.\u003C\u002Fp>\u003Cp>Two groups disclosed by the University correspond to roughly 1.2 million potentially affected people. This is a rounded scope estimate from the official notice, not an exact unique-person total.\u003C\u002Fp>\u003Ch2>How was the incident confirmed?\u003C\u002Fh2>\u003Cp>The University of Hawaiʻi's official notice confirms that the attack was limited to certain servers supporting Cancer Center research operations. A report submitted to the Hawaiʻi Legislature also documents the unauthorised access, ransomware and research-file scope.\u003C\u002Fp>\u003Cp>Reporting by The Record from Recorded Future News independently describes the official timeline and affected groups. The University says it has no evidence that the information was published, shared or misused.\u003C\u002Fp>\u003Ch2>When did the breach occur?\u003C\u002Fh2>\u003Cp>The University identified the cybersecurity incident on or about 31 August 2025. The exact start of the unauthorised access has not been made public, so the record uses this confirmed discovery date.\u003C\u002Fp>\u003Cp>The first statutory report was prepared in December 2025 and the detailed public notice was published on 27 February 2026. Those publication dates are not treated as the start of the breach.\u003C\u002Fp>\u003Ch2>What information may have been affected?\u003C\u002Fh2>\u003Cp>Confirmed fields include names, dates of birth, Social Security numbers and driver's license numbers. Some research files may also have contained health-related information.\u003C\u002Fp>\u003Cp>Historical driver's-license and voter-registration files had been used to recruit research participants. The University states that clinical trials, patient care, other Cancer Center divisions and UH student records were not affected.\u003C\u002Fp>\u003Ch2>How many people were affected?\u003C\u002Fh2>\u003Cp>The official notice identifies 87,493 people in the Multiethnic Cohort study and approximately 1.15 million additional people whose information may have appeared in historical driver's-license and voter-registration records.\u003C\u002Fp>\u003Cp>Because one figure is exact and the other is rounded, they have not been combined into a falsely precise total. Public sources describe the combined scope as approximately 1.2 million people; this is not presented as an exact unique-person count.\u003C\u002Fp>\u003Ch2>What should potentially affected people do?\u003C\u002Fh2>\u003Cp>People who received an incident notice should review credit reports and watch for new accounts opened with their identity information. Messages referring to Social Security or driver's-license data should be verified by opening the University of Hawaiʻi's official incident page directly instead of following an unexpected link.\u003C\u002Fp>\u003Cp>Suspected identity misuse should be reported to the relevant financial institution and official identity-theft channels. Messages claiming to reveal details about research participation or health information deserve particular caution and independent verification.\u003C\u002Fp>","","Review the verified UH Cancer Center breach timeline, its potential scope of about 1.2 million people and the information affected.","https:\u002F\u002Fwww.uhcancercenter.org\u002Fimages\u002Fuh-cancer-center-logo.png",false,{"name":35,"sector":36,"country":37,"website":10,"websiteArchiveUrl":30,"websiteStatus":38,"websiteCheckedAt":12},"University of Hawaiʻi Cancer Center","Healthcare","United States","active"]