Case Overview: Columbia University has agreed to a $16.1 million settlement to resolve class action claims stemming from a 2025 cyberattack that allegedly exposed the personal information of university community members.

Who Qualifies: Individuals whose personal information was compromised in the Columbia University data breach

Estimated Payout: Varies; amount depends on number of valid claims filed

Deadline: To be confirmed — check the settlement website for filing deadlines

Columbia University Agrees to $16.1M Settlement Over 2025 Data Breach

Individuals whose personal information was exposed in a 2025 cyberattack on Columbia University may be eligible for compensation under a proposed $16.1 million class action settlement. The settlement, reported by Top Class Actions, would resolve allegations that the university failed to adequately protect sensitive personal data from unauthorized access.

What You Could Receive

The total settlement fund is valued at $16.1 million. Individual payouts will vary depending on the number of valid claims submitted and each claimant's documented losses. As is typical with data breach settlements, those who can demonstrate out-of-pocket expenses or time spent responding to the breach may be eligible to receive a higher payment than those filing based on general exposure alone.

Specific compensation tiers, if any, will be detailed in the official settlement documents. Because final amounts depend on total claim volume, eligible class members are encouraged to review the settlement terms carefully.

Who Qualifies

You may be eligible to file a claim if you received a notification from Columbia University indicating that your personal information was involved in the 2025 data breach.

Eligibility criteria, as typically defined in settlements of this nature, may include:

• Receiving a data breach notification from Columbia University related to the 2025 cyberattack
• Being a current or former student, faculty member, staff member, or other affiliated individual whose data was stored in the affected systems
• Residing in the United States at the time of the breach

Documentation needed: Proof of notification or other evidence confirming your personal information was involved may be required. Some settlements also allow claimants to attest to their eligibility without a physical receipt or document. Refer to the official settlement website for specific requirements.

How to File a Claim

1. Visit the official settlement website (details available through settlement administration channels — check the Top Class Actions settlement page for direct links as they become available)
2. Complete the online or paper claim form
3. Provide any required documentation, such as your breach notification letter
4. Submit your claim before the stated deadline

The settlement administrator's contact information will be listed on the official settlement website.

What the Case Was About

According to the lawsuit, Columbia University experienced a cyberattack in 2025 that compromised the personal information of individuals affiliated with the university. The plaintiffs alleged that Columbia failed to implement and maintain reasonable data security measures sufficient to protect sensitive information from unauthorized access.

The complaint further alleged that the university's failure to safeguard this data left affected individuals vulnerable to identity theft, fraud, and other harms. Columbia University has not admitted any wrongdoing as part of the settlement agreement.

Data breach class actions like this one typically hinge on claims that an institution collected and stored personal data but did not take adequate steps — such as encryption, access controls, or timely security updates — to prevent exposure.

Important Dates

Specific deadlines for filing claims, opting out, or objecting to the settlement have not yet been confirmed in available reporting. Claimants should monitor the official settlement website for updates, as missing the claims deadline would forfeit any right to compensation under this settlement.

Court approval of the settlement will also be required before any payments are distributed.

Settlement: Columbia University Data Breach Class Action Settlement

Case Number: To be confirmed

Court: To be confirmed

Settlement Amount: $16.1 million

Claim Deadline: To be confirmed — monitor the official settlement website

Settlement Website: To be confirmed — check Top Class Actions for updates

Think you may qualify? Review the eligibility criteria and monitor the official settlement website for claim filing deadlines. Have questions about this settlement? Share them in the comments below.