Columbia University Data Breach Investigation

Migliaccio & Rathod LLP is involved in the Columbia University Data Breach Investigation, regarding a breach that impacted 868,969 individuals and their personal information.

Columbia University (“Columbia“) experienced a technical outage that disrupted certain IT systems on June 24, 2025. After the outage, Columbia claims that it promptly activated its “response process,” initiated an investigation with the assistance of external cybersecurity experts, and reported the incident to law enforcement. Ultimately, Columbia’s investigation uncovered that, on or about May 16, 2025, a hacker accessed its network and stole files containing the personally identifiable information of Columbia students and those who have applied to the Ivy League institution.  The compromised information includes the following sensitive data:

  • full names
  • dates of birth
  • phone numbers
  • other demographic information
  • physical addresses
  • Social Security numbers
  • academic histories
  • financial aid-related information
  • health information
  • health insurance-related information

The Columbia University Data Breach

Columbia University recently provided notice of the data breach. All of the information stolen is likely valuable and dangerous to affected victims. As is likely to be the case with the Columbia University data breach, in previous cyberattacks, victims of data theft have noticed identity theft attempts ranging from fraudulent charges on bank accounts or credit cards, to unauthorized credit card applications, to medical services or government services ordered in their name, to their information being posted on the dark web, to a massive uptick in the number of spam text messages, calls and emails received.

Are you concerned that you might be affected by the Columbia University data breach?

If you have concerns that you have been affected by this data breach, and/or have experienced suspicious activity since May 16, 2025, we would like to hear from you. Please complete the contact form on this page, send us an email at [email protected], or give us a call at (202) 470-3520.

    The following will ask for your contact information so that we may reach you to talk about potential claims. This information is for our records only and will not be shared. By continuing, you consent to the collection of this information for these limited purposes.


    Did you receive a notification that you were affected by the data breach?


    Did you suffer harm after the data breach that was possibly related to the breach?

    If yes, what kind of harm? Select all that apply.


    Would you like to join our newsletter to receive notifications about other investigations we're looking into, as well as updates on ongoing cases?

    The lawyers at Migliaccio & Rathod LLP have years of experience in class action litigation against large corporations, including in cases involving data breaches such as this. More information about our current cases and investigations is available on our blog.

    Columbia University Data Breach Notification