INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Columbia University Settles $16.1M Lawsuit After 2025 Cyberattack

| 2026-10-27 08:49 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
In June 2025, a politically motivated cyberattack was carried out against Columbia University, resulting in the theft of sensitive data belonging to around 870,000 applicants and affiliates. The hacker claimed responsibility for the attack, stating that they were seeking evidence of Columbia's continued use of affirmative action in admissions after the Supreme Court struck down the practice in 2023. As a result of the breach, Columbia University Information Technology announced an internal investigation which found no evidence that the stolen data was sold or distributed on the dark web. The university has since taken proactive steps to strengthen its data security and governance practices, with plans to further enhance cybersecurity as part of a $16.1 million settlement over the breach.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope educationeducation
Incident Timeline
‎March 2025
Threat actors claimed responsibility for a March 2025 breach at Columbia University, stealing contact information and sensitive data of approximately 870,000 applicants and affiliates.
organisation New York University
The same hacker claimed responsibility for a March 2025 breach at New York University, where admissions data was posted to NYU’s website.
organisation NYU
The same hacker claimed responsibility for a March 2025 breach at New York University, where admissions data was posted to NYU’s website.
financial $16.1 $ Breach Lawsuit
In September, the University agreed to pay $16.1 million to settle a class action lawsuit over the breach.
organisation Black
That data purported to show that Asian and white students admitted to NYU had higher average GPAs and test scores than admitted Black and Hispanic students.
organisation Social Security
The hacker stole contact information, Social Security numbers , health data , and financial aid data belonging to around 870,000 Columbia applicants and affiliates.
data_breach 870,000 Columbia applicants
The hacker stole contact information, Social Security numbers , health data , and financial aid data belonging to around 870,000 Columbia applicants and affiliates.
organisation the Columbia University Cyberattack
After the Columbia University Cyberattack   In its Friday statement, Columbia said it took “proactive steps to strengthen our data security and governance practices” after the attack, adding that the settlement includes a commitment to further enhancing cybersecurity.
financial $100 $ estimated payment
Each plaintiff may claim two years of credit monitoring services and either an estimated $100 payment or up to $8,500 in reimbursement for documented losses.
financial $8,500 $ estimated payment
Each plaintiff may claim two years of credit monitoring services and either an estimated $100 payment or up to $8,500 in reimbursement for documented losses.
‎June 2025
The Motive Behind Cyberattack   In June 2025, the hacker told Bloomberg they were looking for evidence that Columbia still used affirmative action in admissions after the Supreme Court struck down the practice in 2023.
organisation Columbia University Information Technology
An internal investigation into the June 2025 Columbia University cyberattack found no evidence that the stolen data was sold or distributed on the dark web, Columbia University Information Technology announced Friday.
organisation the Supreme Court
The Motive Behind Cyberattack   In June 2025, the hacker told Bloomberg they were looking for evidence that Columbia still used affirmative action in admissions after the Supreme Court struck down the practice in 2023.
financial $16.1 $ Breach Lawsuit
The University also said claims administrator Angeion Group LLC will contact affected individuals about submitting claims under Columbia’s $16.1 million settlement over the breach.
organisation University
The University also said claims administrator Angeion Group LLC will contact affected individuals about submitting claims under Columbia’s $16.1 million settlement over the breach.
organisation Angeion Group
The University also said claims administrator Angeion Group LLC will contact affected individuals about submitting claims under Columbia’s $16.1 million settlement over the breach.
organisation LLC
The University also said claims administrator Angeion Group LLC will contact affected individuals about submitting claims under Columbia’s $16.1 million settlement over the breach.
organisation Columbia
The University also said claims administrator Angeion Group LLC will contact affected individuals about submitting claims under Columbia’s $16.1 million settlement over the breach.
‎2026/10/27
Columbia University agreed to pay $16.1 million in a data breach lawsuit stemming from a 2025 cyberattack.
organisation Columbia University
Columbia University Settles $16.1M Data Breach Lawsuit After 2025 Cyberattack.
organisation M Data Breach Lawsuit
Columbia University Settles $16.1M Data Breach Lawsuit After 2025 Cyberattack.
financial $16.1 $ Breach Lawsuit
Columbia University Settles $16.1M Data Breach Lawsuit After 2025 Cyberattack.
‎Feb. 23, 2027
Columbia University agreed to pay $16.1 million as part of a settlement in its data breach lawsuit following the 2025 cyberattack.
Tactical Metrics
Metrics
financial
16,100,000
$ Breach Lawsuit
Columbia University Settles $16.1M Data Breach Lawsuit After 2025 Cyberattack.
The University also said claims administrator Angeion Group LLC will contact affected individuals about submitting claims under Columbia’s $16.1 million settlement over the breach.
In September, the University agreed to pay $16.1 million to settle a class action lawsuit over the breach.
Metrics
data_breach
870,000
Columbia Applicants
The hacker stole contact information, Social Security numbers , health data , and financial aid data belonging to around 870,000 Columbia applicants and affiliates.
Metrics
financial
100
$ Estimated Payment
Each plaintiff may claim two years of credit monitoring services and either an estimated $100 payment or up to $8,500 in reimbursement for documented losses.
Metrics
financial
8,500
$ Estimated Payment
Each plaintiff may claim two years of credit monitoring services and either an estimated $100 payment or up to $8,500 in reimbursement for documented losses.
Intelligence Sources
The Cyber Express 2026-10-27