Columbia University Data Breach Exposes 2.5 Million Applicants' Data

In June 2025, Columbia University suffered a significant data breach, initially misreported as a technical failure. The breach, attributed to a politically motivated hacktivist, resulted in the exfiltration of 460 GB of sensitive data, impacting 868,969 individuals, including many with no direct ties to the university. The stolen data included Social Security numbers, financial aid records, and academic histories of over 2.5 million applicants. The attacker claimed the breach aimed to expose post-affirmative action admissions practices. Columbia detected the breach in late June but did not notify the public until July, leaving many victims confused about their compromised data. A forensic investigation is ongoing, but no specific details about the attack vector or vulnerabilities exploited have been disclosed. The incident raises concerns about the retention of sensitive personal data by educational institutions.

Key Points: • Columbia University experienced a major data breach affecting 868,969 individuals. • The breach involved the theft of 460 GB of sensitive data, including Social Security numbers. • The attacker claimed to expose issues related to post-affirmative action admissions practices.