2025 Cyber Incident FAQ
On June 24, 2025, Columbia University experienced a technical outage that disrupted parts of our IT systems. An investigation with leading outside cybersecurity experts and law enforcement determined that an unauthorized party accessed our network, disrupted operations, and stole data. We have not observed further unauthorized access since June 24, 2025, and continue to monitor our systems.
We began notifying affected individuals in August 2025 while our review of the affected data was ongoing. Our process of notifying remains ongoing and the next grouping will begin on December 30, 2025.
Our investigation has identified that the unauthorized party obtained information about students and applicants related to admissions, enrollment, and financial aid processes, as well as certain personal information associated with some Columbia employees. The affected information includes Social Security numbers, contact details, demographic information, academic history, financial aid-related information, and insurance-related information. It’s important to note that, to date, we have no indication that any Columbia University Irving Medical Center patient records were affected.
Follow the instructions provided to enroll in the complimentary credit monitoring and identity‑theft protection services. You should also remain vigilant by monitoring your accounts for any unusual activity. If you have questions or need assistance, you can contact our dedicated hotline at (866) 819‑7006, Monday through Friday, 9:00 a.m. to 6:30 p.m. Eastern Time, excluding major U.S. holidays.
While there is no evidence of identity theft or fraud, the University is offering all affected individuals two years of complimentary credit monitoring and identity restoration services through Kroll, and has implemented enhanced security measures to help prevent future incidents.
If you have questions or need assistance, you can contact our dedicated hotline at (866) 819‑7006, Monday through Friday, 9:00 a.m. to 6:30 p.m. Eastern Time, excluding major U.S. holidays.
We have established an information hotline, (866) 819-7006, that members of the University community can call with questions. This information hotline will be staffed 9:00 a.m. to 6:30 p.m. Eastern Time, Monday through Friday, excluding major U.S. holidays.
Yes, the email from [email protected] is a legitimate notice. Those who received it also received a notice via U.S. mail.