$3.5M University of Hawaii data breach class action settlement

The University of Hawaii agreed to a $3.5 million class action settlement to resolve claims it failed to prevent a 2025 data breach that compromised sensitive research participant information stored at the University of Hawaii Cancer Center.

The University of Hawaii settlement benefits individuals who were notified that their information was potentially compromised in the University of Hawaii data breach on Aug. 31, 2025.

In January 2026, the University of Hawaii announced it had been the victim of a data breach. According to the university, a third party unlawfully accessed specific University of Hawaii Cancer Center servers that support research operations in the center’s epidemiology division.

The University of Hawaii data breach allegedly compromised names, Social Security numbers, driver’s license numbers and research-related private information. The affected data was contained in research files. The medical records for patients treated at or in conjunction with the cancer center were unaffected.

According to plaintiffs in the University of Hawaii data breach class action lawsuit, the University of Hawaii could have prevented the breach through reasonable cybersecurity measures.

The University of Hawaii has not admitted any wrongdoing but agreed to a $3.5 million class action settlement to resolve the allegations.

Under the terms of the University of Hawaii settlement, class members can receive either a cash payment or reimbursement for documented data breach losses.

Class members who experienced extraordinary documented losses as a result of the data breach can receive up to $5,000 in reimbursement. This reimbursement is only available to class members who have not already been compensated for these losses through other means, such as credit monitoring and identity theft protection.

Class members who did not experience extraordinary documented losses can receive a smaller cash payment estimated to be around $50. These payments may be increased or decreased on a pro rata basis depending on the number of claims filed with the settlement.

All class members, regardless of whether they experienced losses as a result of the data breach, can receive one year of free medical data monitoring through CyEx’s Medical Shield Pro Medical Data Monitoring service.

The deadline for exclusion and objection is Oct. 19, 2026.

The final approval hearing for the University of Hawaii data breach settlement is scheduled for Nov. 4, 2026.

To receive settlement benefits, class members must submit a valid claim form by Nov. 2, 2026.

Who’s Eligible

The class action settlement benefits individuals who were notified that their personal information was potentially compromised in the University of Hawaii data breach in August 2025.

Potential Award

Up to $5,000 in documented losses or an estimated $50 cash payment

Proof of Purchase

Documentation of losses related to fraud or identity theft that can be traced to the data breach, such as phone records, correspondence or receipts

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

11/02/2026

Case Name

In re: University of Hawaii Data Breach Litigation, Case No. 1CCV-26-0000280, in the First Judicial Circuit Court for the State of Hawaii

Final Hearing

11/04/2026

Settlement Website

UHDataSettlement.com

Claims Administrator

University of Hawaii Data Incident
Settlement Administrator
P.O. Box 3719
Portland, OR 97208-3719
[email protected]
877-417-7187

Class Counsel

Robert M. Hatch
Margery S. Bronster
BRONSTER FUJICHAKU ROBBINS

Caroline Herter
KOPELOWITZ OSTROW P.A.

Defense Counsel

Alfred J. Saikali
SHOOK, HARDY & BACON LLP