[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f30a6axxwi7em0":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":20,"affectedCountUnit":21,"hasEnglishDescription":4,"severity":22,"dataClasses":23,"description":35,"seoTitle":36,"seoTitleEn":37,"seoDescription":36,"seoDescriptionEn":38,"logoUrl":39,"isVerified":4,"isSensitive":4,"isSpamList":40,"isMalware":40,"company":41},"6a6f8f6a75b6c9900b8ac77e","ColumbiaUniversity2025","Columbia University Data Breach","columbia-university-2025","columbia.edu","2025-05-16T00:00:00.000Z","2026-08-02T18:41:46.029Z","Unauthorized network access with data theft and disruption of university IT systems","https:\u002F\u002Fwww.cuit.columbia.edu\u002Fcontent\u002Fupdating-our-community-cyber-incident",[14,16,17],"https:\u002F\u002Foag.my.site.com\u002Fdatasecuritybreachreport\u002Fapex\u002FDataSecurityReportsPage","https:\u002F\u002Farstechnica.com\u002Ftech-policy\u002F2026\u002F06\u002Fmy-ssn-was-exposed-in-a-breach-at-columbia-a-school-i-have-no-connection-with\u002F",3067242,"known",null,"people","Critical",[24,25,26,27,28,29,30,31,32,33,34],"Names","Physical addresses","Dates of birth","Social security numbers","Driver's license numbers","Government IDs","Financial account information","Health insurance information","Medical information","Education details","Enrollment information","\u003Cp>Columbia University is a higher-education institution based in New York. According to the current Texas Attorney General record, the May–June 2025 network breach affected 3,067,242 people nationwide.\u003C\u002Fp>\u003Cp>The university detected unauthorized access that disrupted certain information-technology systems on June 24, 2025. Its investigation confirmed that the attacker stole data from the network, while specifically finding no evidence that Columbia University Irving Medical Center patient records were affected.\u003C\u002Fp>\u003Ch2>Confirmed timeline\u003C\u002Fh2>\u003Cp>The Texas record lists an access window from May 16 through June 24, 2025. After the June 24 outage, Columbia secured its systems, engaged outside cybersecurity specialists, and said it observed no further unauthorized network access.\u003C\u002Fp>\u003Cp>The university began its initial notifications in August 2025 and completed broader review and additional notifications in 2026. The July 8 discovery field in Texas reflects a later investigation stage; June 24 is preserved as the operational detection date reported by the university.\u003C\u002Fp>\u003Ch2>Why did the affected count change?\u003C\u002Fh2>\u003Cp>An initial 2025 regulator filing reported a narrower population of 868,969 people. Further review identified information belonging to people with no direct Columbia affiliation that had historically been provided through student-recruitment or scholarship processes, raising the current Texas total to 3,067,242.\u003C\u002Fp>\u003Cp>Ars Technica reports that about 1.8 million Social Security numbers were involved. That is a field-specific subset within the affected population; the initial notice count, current nationwide total, and Social Security subset are not added together.\u003C\u002Fp>\u003Ch2>What information may have been affected?\u003C\u002Fh2>\u003Cp>Depending on the person, affected information may include names, addresses, dates of birth, Social Security numbers, driver's licenses or other government IDs, financial-account information, health-insurance and certain health information, as well as admissions, enrollment, academic-history, and financial-aid information.\u003C\u002Fp>\u003Cp>Although the official notice mentions certain health information, it says there is no evidence that medical-center patient records were affected. Not every category should be assumed for every person; direct notice recipients should rely on the fields listed in their own letters.\u003C\u002Fp>\u003Ch2>Identity and education-data risks\u003C\u002Fh2>\u003Cp>Social Security, birth-date, and government-ID information combined with academic-history or financial-aid context can make fraudulent credit, tax, scholarship, or account-recovery attempts more convincing.\u003C\u002Fp>\u003Cp>Notice recipients should monitor credit reports, consider a credit freeze or fraud alert, and check tax or student-aid accounts for unexpected changes. Enrollment in Columbia's monitoring service should be completed only through the official notice channel.\u003C\u002Fp>\u003Ch2>Admissions and financial-aid fraud\u003C\u002Fh2>\u003Cp>Attackers may use real school, application, enrollment, or financial-aid details in fake scholarship, missing-document, fee-refund, debt, or account-verification messages. Correct personal information does not prove that a sender represents the university.\u003C\u002Fp>\u003Cp>Independently verify any payment, document, or identity request through Columbia's official domain or another previously known channel. Do not use a link, phone number, or attachment in an unexpected message for verification.\u003C\u002Fp>\u003Ch2>How should a result be interpreted?\u003C\u002Fh2>\u003Cp>\u003Cstrong>A positive match connected to this incident is sufficient reason to check the fields in the person's own notice and apply appropriate identity, credit, and education-account protections.\u003C\u002Fstrong> It does not prove that every category belonged to that person or that the data was misused.\u003C\u002Fp>\u003Cp>A negative result does not guarantee that no record exists in another incident. Anyone who received a direct Columbia notice should follow its deadlines and protective steps even if they have no current relationship with the university.\u003C\u002Fp>","","Columbia University Data Breach (3.1 Million People Affected)","Columbia University's 2025 data breach affected 3,067,242 people, exposing identity, education, financial-aid, insurance, and certain health data.","https:\u002F\u002Fwww.cuit.columbia.edu\u002Fsites\u002Fwww.cuit.columbia.edu\u002Ffiles\u002Flogo\u002FCUIT_Logo_286_web.jpg",false,{"name":42,"sector":43,"country":44,"website":10,"websiteArchiveUrl":36,"websiteStatus":45,"websiteCheckedAt":12},"Columbia University","Education","United States","active"]