An unknown menace actor has stolen the delicate private, monetary, and well being info of almost 870,000 Columbia College present and former college students and workers after breaching the college’s community in Might.
Established in 1767 as King’s School, Columbia College is a personal Ivy League analysis college with a funds of $6.6 billion in 2024, over 20,000 workers, together with 4,700 educational workers, and over 35,000 enrolled college students throughout 19 colleges and particular packages.
The breach was found and reported to legislation enforcement authorities following an outage that affected a few of its techniques on June 24, following an investigation with help from exterior cybersecurity specialists.
In notification letters filed with the workplace of Maine’s Lawyer Common on Thursday, August 7, the college mentioned that the information breach impacts 868,969 people, together with workers, candidates, present and former college students, and members of the family.
“Our investigation decided that, on or about Might 16, 2025, an unauthorized third-party gained entry to Columbia’s community and subsequently took sure information from our system,” Columbia College mentioned. “So far, we’ve got no proof that any Columbia College Irving Medical Middle affected person information had been affected.”
The college first confirmed the information theft final week in an announcement, following experiences that the alleged hacker claimed to have stolen 460 gigabytes of information from the compromised techniques.
On Wednesday, the college issued one other assertion, confirming that the stolen information belongs to present and former college students, candidates, and a few Columbia workers.
In response to the letters despatched to affected people through the U.S. Postal Service, the stolen information features a mixture of non-public, monetary, and well being info.
“The affected information included your identify, date of delivery, and Social Safety quantity, in addition to any private info that you just offered in connection together with your software to Columbia, or that we collected throughout your research in the event you enrolled,” the college added.
“This included your contact particulars, demographic info, educational historical past, monetary aid-related info, and any insurance-related info and well being info that you just shared with us.”
Whereas Columbia College has no proof that the information has been misused in id theft or fraud makes an attempt, it would present two years of free credit score monitoring, fraud session, and id theft restoration companies by way of Kroll to these impacted by this information breach.
Malware focusing on password shops surged 3X as attackers executed stealthy Good Heist situations, infiltrating and exploiting essential techniques.
Uncover the highest 10 MITRE ATT&CK methods behind 93% of assaults and the right way to defend towards them.
