HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICHighContained
Columbia University
bd_82648491a36c0afc · schema v1 · pii pii-v1
Full breach record for Columbia University →Columbia University disclosed a cyber incident occurring on or about May 16, 2025, where an unauthorized third party accessed the network and exfiltrated files. The breach affected names, dates of birth, Social Security numbers, and financial/health information. Approximately 2,510 Rhode Island residents were identified as impacted. Columbia reported the incident to law enforcement, engaged external cybersecurity experts, and is offering two years of complimentary credit monitoring and identity restoration services through Kroll.
This filing is one of 11 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_07533b0c85ac791cMaine State AGfiled 2025-08-07Candidate
- bd_2c8504262b9c10ebWashington State AGfiled 2025-08-07Verified
- bd_44bbed6c166a9c6dIndiana State AGfiled 2025-08-07Verified
- bd_88b5b3d68c5a023aMontana State AGfiled 2025-08-07Verified
Show 6 more filings ↓Show fewer ↑up to 5d gap
- bd_9b1ee72034df1e55Vermont State AGfiled 2025-08-07Verified
- bd_d1103ca10d166462California State AGfiled 2025-08-07Verified
- bd_d5052bb9304189edSouth Carolina State AGfiled 2025-08-07Verified
- bd_f8f32a88711240f8Oregon State AGfiled 2025-08-07Verified
- bd_2337be0c0546ca35Iowa State AGfiled 2025-08-08(1d gap)Verified
- bd_1de0d58aeabac377New Hampshire State AGfiled 2025-08-12(5d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/01/Columbia_Sample-of-the-Notice-to-Affected-Persons.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 7, 2025
- Raw hash
- 6bb8a21b51b65dd3ab9ce1e44baa9e2df5dcbcb1148214e3cbcfbf71563d704d
Reporting entity
- Name
- Columbia Universitynorm: columbia university
Victim entity
- Name
- Columbia Universitynorm: columbia university
Incident
- Discovered
- May 16, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 2,510
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- reported the incident to law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(83 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.