$16.1M Columbia University data breach class action settlement - Top Class Actions

The settlement benefits U.S. residents whose private information was compromised in the May 2025 cyberattack and who received notice of it. According to the class action lawsuit, an unauthorized third party accessed the university's systems, exposing Social Security numbers, driver's license numbers, financial account information, medical records, academic records, financial aid information, and admission decisions.

Settlement Terms

Columbia University has not admitted any wrongdoing but agreed to pay $16.1 million to resolve the allegations. Class members can receive up to $8,500 in reimbursement for documented losses or an alternative cash payment, depending on remaining funds after fees and costs.

Victims will also receive two years of three-bureau credit monitoring, dark web monitoring, identity theft insurance up to $1 million, and identity recovery services.

Claim Process

The deadline for exclusion and objection is Dec. 22, 2026, while the final approval hearing is scheduled for Feb. 23, 2027. To receive benefits, class members must submit a valid claim form by Jan. 21, 2027.

Eligible individuals are those residing in the United States whose private information was compromised in the breach and who were sent notice of the cyberattack. Documentation such as receipts or records showing losses caused by the data breach is required.