An unknown risk actor has stolen the delicate private, monetary, and well being info of almost 870,000 Columbia College present and former college students and workers after breaching the college’s community in Might.
Established in 1767 as King’s Faculty, Columbia College is a non-public Ivy League analysis college with a price range of $6.6 billion in 2024, over 20,000 workers, together with 4,700 educational employees, and over 35,000 enrolled college students throughout 19 faculties and particular packages.
The breach was found and reported to regulation enforcement authorities following an outage that affected a few of its methods on June 24, following an investigation with assist from exterior cybersecurity consultants.
In notification letters filed with the workplace of Maine’s Legal professional Normal on Thursday, August 7, the college mentioned that the information breach impacts 868,969 people, together with workers, candidates, present and former college students, and members of the family.
“Our investigation decided that, on or about Might 16, 2025, an unauthorized third-party gained entry to Columbia’s community and subsequently took sure information from our system,” Columbia College mentioned. “Up to now, we’ve got no proof that any Columbia College Irving Medical Heart affected person data had been affected.”
The college first confirmed the information theft final week in an announcement, following reviews that the alleged hacker claimed to have stolen 460 gigabytes of knowledge from the compromised methods.
On Wednesday, the college issued one other assertionconfirming that the stolen knowledge belongs to present and former college students, candidates, and a few Columbia workers.
In response to the letters despatched to affected people through the U.S. Postal Service, the stolen knowledge features a mixture of private, monetary, and well being info.
“The affected knowledge included your identify, date of delivery, and Social Safety quantity, in addition to any private info that you just supplied in connection along with your software to Columbia, or that we collected throughout your research for those who enrolled,” the college added.
“This included your contact particulars, demographic info, educational historical past, monetary aid-related info, and any insurance-related info and well being info that you just shared with us.”
Whereas Columbia College has no proof that the information has been misused in id theft or fraud makes an attempt, it should present two years of free credit score monitoring, fraud session, and id theft restoration companies by means of Kroll to these impacted by this knowledge breach.
Malware concentrating on password shops surged 3X as attackers executed stealthy Good Heist eventualities, infiltrating and exploiting important methods.
Uncover the highest 10 MITRE ATT&CK strategies behind 93% of assaults and how one can defend towards them.
