$3.5M University of Hawaii Data Breach Settlement

Individuals who were notified that their personal information was potentially compromised in the University of Hawaii data breach in August 2025 are eligible.

Documentation of losses related to fraud or identity theft traceable to the data breach, such as phone records, correspondence, or receipts, is required for extraordinary loss claims up to $5,000; no proof is required for the base cash payment.

About This Settlement

Plaintiffs alleged that the University of Hawaii failed to implement reasonable cybersecurity measures to protect sensitive personal information stored on University of Hawaii Cancer Center research servers, resulting in an alleged data breach on August 31, 2025 that exposed names, Social Security numbers, driver's license numbers, and research-related private information. The breach, which affected the Cancer Center's epidemiology division, was announced in January 2026 after an unauthorized third party allegedly accessed the servers. Without admitting any wrongdoing, the University of Hawaii agreed to a $3.5 million class action settlement to resolve these claims. This page is for informational purposes only and does not constitute legal advice.

Who Qualifies

• You were notified that your personal information was potentially compromised in the University of Hawaii data breach that occurred on August 31, 2025
• Your information was stored on University of Hawaii Cancer Center servers supporting the epidemiology division's research operations
• The exposed information may have included your name, Social Security number, driver's license number, and/or research-related private information
• Note: Individuals whose medical records were held by the Cancer Center as patients are not affected — only research-related data was compromised
• If you are unsure whether you qualify, visit UHDataSettlement.com or contact the settlement administrator for clarification

What You May Receive

Eligible class members may receive one of two forms of compensation, depending on their circumstances. Those who experienced extraordinary documented losses as a direct result of the alleged data breach may receive up to $5,000 in reimbursement — provided those losses have not already been covered through other means such as credit monitoring or identity theft protection services. Class members without documented extraordinary losses may receive an estimated cash payment of approximately $50. All payment amounts are subject to increase or decrease on a pro rata basis depending on the total number of valid claims filed. Additionally, all class members — regardless of documented losses — may be eligible to receive one year of free medical data monitoring through CyEx's Medical Shield Pro service. No payout amount is guaranteed.

How to File a Claim

1. Visit the official settlement website at UHDataSettlement.com to access the claim form and review the full settlement terms.
2. Complete the claim form with accurate personal information, including details that confirm you received a notification about the alleged August 31, 2025 data breach.
3. If you are seeking reimbursement for extraordinary documented losses (up to $5,000), gather and submit supporting documentation such as phone records, correspondence, receipts, or other relevant records showing your out-of-pocket losses.
4. If you are not claiming documented losses, you may submit the claim form without additional documentation to receive the estimated $50 cash payment.
5. Submit your completed claim form — with any required documentation — by the claim deadline of November 2, 2026. Late submissions may not be accepted.

Case Details

Settlement: University of Hawaii Data Breach Class Action Settlement
Claim Deadline: November 2, 2026
Settlement Website: UHDataSettlement.com