Columbia University Hit by Major Data Breach Amid Antisemitism Controversy and Leadership Scrutiny
Columbia University is facing a dual crisis after a politically motivated hacker breached its core information systems, stealing vast amounts of sensitive data and sparking renewed scrutiny of campus leadership over antisemitism concerns.
The cyberattack, which began on June 24, 2025, led to widespread IT outages, temporarily disrupting access to email, student portals, and administrative services. University officials confirmed that the breach compromised personal information belonging to faculty, staff, applicants, students, and their families. The hacker, described as a "hacktivist," told Bloomberg News they spent two months infiltrating Columbia's network, ultimately stealing up to 460 gigabytes of data, including at least 1.8 million Social Security numbers and other personal and financial records.
The attacker claimed their motive was to investigate whether Columbia was using affirmative action in admissions, a practice the Supreme Court prohibited in 2023. Data released to media reportedly included decades of student applications, citizenship statuses, application outcomes, and academic program choices. Among the exposed documents were allegations that New York City mayoral candidate Zohran Mamdani misrepresented his racial identity on his application, though Columbia has not publicly commented on this specific claim.
In response, Columbia isolated affected systems and launched a comprehensive forensic review. The university stated it would notify all individuals whose data was compromised as the investigation continues. Restoration of internal networks and websites was completed within a week, but officials warned that assessing the full scope of the breach could take months.
The cyberattack comes as Columbia's leadership faces mounting criticism over its handling of antisemitism on campus. Acting president Claire Shipman issued a public apology after leaked text messages appeared to dismiss concerns about antisemitism and criticized a Jewish trustee’s pro-Israel advocacy. The House Committee on Education and the Workforce has launched an investigation into Shipman’s statements, intensifying pressure on the university to address campus safety and leadership accountability.
Negotiations with federal authorities are ongoing, with the Trump administration threatening to withdraw $400 million in federal funding over alleged failures to protect Jewish students. Columbia has already agreed to several federal demands, including changes to its Middle East studies department oversight and protest policies.
The university continues to work with cybersecurity experts and law enforcement as it seeks to contain the fallout from the breach and restore trust among students, staff, and the broader community.