An Update on the 2025 Cyberattack

October 23, 2026

Last summer we informed the Columbia community about a cyberattack on the University. Our investigation determined this was carried out by a hacker whose stated motivation was political. We found no evidence that this was financially motivated or that the data has been sold or distributed on the dark web.

The University reached an agreement to resolve class action litigation brought on behalf of individuals who may have been affected by the cyberattack. The Court has preliminarily approved the agreement, and those whose information was affected by the cyberattack will be receiving instructions from Angeion Group, LLC, an independent third party the Court has appointed to manage claims under the agreement, on how to submit a claim for compensation, as well as information about additional credit monitoring. Immediately after discovering the cyberattack, the University tookproactive steps to strengthen our data security and governance practices. As part of the agreement, Columbia also committed to further enhance our cybersecurity program.

Questions about the notice that those whose information was affected by the cyberattack will receive, and the claims process under the agreement, should be directed to Angeion Group, LLC. Additional information is available from Angeion Group at www.ColumbiaUniversityDataSettlement.com or 1-833-617-4373.

We regret the concern that this incident has caused our community and believe the actions we have taken and commitments we have accepted in the agreement reflect the seriousness with which we are approaching this matter. Thank you for your continued understanding and support.