An unknown menace actor has stolen the delicate private, monetary, and well being info of almost 870,000 Columbia College present and former college students and workers after breaching the college’s community in Could.
Established in 1767 as King’s School, Columbia College is a non-public Ivy League analysis college with a finances of $6.6 billion in 2024, over 20,000 workers, together with 4,700 tutorial employees, and over 35,000 enrolled college students throughout 19 colleges and particular applications.
The breach was found and reported to legislation enforcement authorities following an outage that affected a few of its programs on June 24, following an investigation with assist from exterior cybersecurity consultants.
In notification letters filed with the workplace of Maine’s Lawyer Basic on Thursday, August 7, the college mentioned that the information breach impacts 868,969 people, together with workers, candidates, present and former college students, and relations.
“Our investigation decided that, on or about Could 16, 2025, an unauthorized third-party gained entry to Columbia’s community and subsequently took sure information from our system,” Columbia College mentioned. “To this point, we’ve no proof that any Columbia College Irving Medical Middle affected person data have been affected.”
The college first confirmed the information theft final week in a press release, following studies that the alleged hacker claimed to have stolen 460 gigabytes of knowledge from the compromised programs.
On Wednesday, the college issued one other assertion, confirming that the stolen information belongs to present and former college students, candidates, and a few Columbia workers.
In accordance with the letters despatched to affected people through the U.S. Postal Service, the stolen information features a mixture of private, monetary, and well being info.
“The affected information included your title, date of delivery, and Social Safety quantity, in addition to any private info that you simply supplied in connection together with your software to Columbia, or that we collected throughout your research in the event you enrolled,” the college added.
“This included your contact particulars, demographic info, tutorial historical past, monetary aid-related info, and any insurance-related info and well being info that you simply shared with us.”
Whereas Columbia College has no proof that the information has been misused in id theft or fraud makes an attempt, it should present two years of free credit score monitoring, fraud session, and id theft restoration providers by means of Kroll to these impacted by this information breach.
Malware focusing on password shops surged 3X as attackers executed stealthy Excellent Heist situations, infiltrating and exploiting essential programs.
Uncover the highest 10 MITRE ATT&CK methods behind 93% of assaults and how one can defend towards them.
