$16.1M Columbia University data breach class action settlement

Columbia University has agreed to a $16.1 million class action settlement to resolve claims it failed to protect personal information in a 2025 cyberattack.

The Columbia University settlement benefits U.S. residents whose private information was compromised in the May 2025 cyberattack and who were sent notice of it.

Columbia University is a private university in New York City. According to claims made in a class action lawsuit against Columbia, an unauthorized third party accessed the school’s systems in May 2025.

Specifically, plaintiffs in the case said the data accessed includes Social Security numbers, driver’s license numbers, financial account information, medical information and health insurance information. The data also allegedly includes academic records, financial aid information and admission decisions.

Columbia University has not admitted any wrongdoing but agreed to pay a $16.1 million class action settlement to resolve these allegations.

Under the terms of the Columbia University data breach settlement, class members can receive up to $8,500 in reimbursement for documented losses or an alternative cash payment.

The alternative cash payment amount will depend on how much of the settlement fund remains after fees, costs and approved claims.

Class members can also receive two years of three-bureau credit monitoring, dark web monitoring, identity theft insurance up to $1 million and identity recovery services.

The deadline for exclusion and objection is Dec. 22, 2026.

The final approval hearing for the Columbia University settlement is scheduled for Feb. 23, 2027.

To receive class action settlement benefits, class members must submit a valid claim form by Jan. 21, 2027.

Who’s Eligible

The class action settlement benefits individuals residing in the United States whose private information was compromised as a result of the Columbia University data breach and who were sent notice of the cyberattack that occurred in May 2025.

Potential Award

Up to $8,500

Proof of Purchase

Documentation may include receipts or other records that show losses caused by the data breach.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

01/21/2027

Case Name

In re: Columbia University Data Breach Litigation, Case No. 1:25-cv-05541 (PKC), in the U.S. District Court for the Southern District of New York

Final Hearing

02/23/2027

Settlement Website

ColumbiaUniversityDataSettlement.com

Claims Administrator

Columbia University Data Settlement Administrator
1650 Arch Street, Suite 2210
Philadelphia, PA 19103
833-617-4373

Class Counsel

William B. Federman
FEDERMAN & SHERWOOD

Ashley M. Crooks
HAUSFELD LLP

Rachele R. Byrd
WOLF HALDENSTEIN ADLER FREEMAN & HERZ LLP

Charles E. Schaffer
LEVIN SEDRAN & BERMAN LLC

Defense Counsel

James J. Pastore Jr.
Erez Liebermann
James Schaefer
DEBEVOISE & PLIMPTON LLP