Columbia University data breach settlement: up to $8,500, due Jan 21
Columbia University data breach settlement: who qualifies, the up to $8,500 loss claim, the cash option, credit monitoring and how to file by Jan 21, 2027.
The Columbia University data breach settlement is open for claims until January 21, 2027. A $16,125,000 fund covers people in the U.S. whose private information was compromised in the university's May 2025 cyberattack and who were sent notice of it. You can claim up to $8,500 for documented losses (proof required) or an alternative cash payment whose size depends on how many people file, and you can add two years of credit monitoring. Claim directly on the official settlement site; it costs nothing.
What the Columbia University data breach settlement is about
The case is In re Columbia University Data Breach Litigation, No. 1:25-cv-05541, in the U.S. District Court for the Southern District of New York. It follows a cyberattack in May 2025 that allegedly exposed personal information held by the university. News coverage says Columbia found the incident in June 2025 and that a state filing put the number of affected people at about 3.1 million. The data involved varied by person and, per that coverage, included items such as Social Security numbers, financial account details, academic histories and some medical information.
Columbia denies wrongdoing. As part of the deal it has agreed to keep extra security measures in place for three years after the settlement takes effect. The court has not yet given final approval, so no money moves until it does. For how these cases usually unfold, see our data breach settlement guide.
Who qualifies for the Columbia settlement
The class is individuals residing in the United States whose private information was compromised in the May 2025 cyberattack and who were sent notice of it. The settlement site does not break that down into students, applicants, alumni or employees, so the practical test is whether you received a notice about this incident from Columbia.
ClaimDepot reports that the online form asks for a unique notice ID and confirmation code from that notice, and that people who never received a notice can't file. I could not see that rule on the official pages, so check the claim page itself. If you lost your notice, use the Contact Us option on the settlement site. Our explainer on claim IDs and notice IDs covers what to do when the code is missing.
How much you could get from the Columbia settlement
There are two money options, and credit monitoring is available on top of either. The cash payment is not a fixed amount: it is what remains of the fund after court-approved fees, litigation costs, service awards, administration costs, credit monitoring and approved documented-loss claims. With millions of people in the class, expect a modest figure if many file. Some listing sites quote about $100, but the official site does not state a number, so don't count on it.
Documented losses need records tying the loss to the cyberattack, such as statements or receipts. For why settlement checks tend to land small, read the real math behind small checks.
| Benefit | Amount | Proof needed? |
|---|---|---|
| Documented monetary losses | Up to $8,500 | Yes, supporting documentation |
| Alternative cash payment | Not fixed; depends on claims filed | Not stated as required |
| Credit monitoring | 2 years, with identity theft insurance up to $1,000,000 | No |
How to file a Columbia University settlement claim
Filing directly with the administrator, Angeion Group, is free, and you submit the form yourself. Claims can be filed online or mailed with a postmark by the deadline. Gather any receipts or statements first if you plan to claim documented losses. A broader walkthrough is in how to file a class action claim.
- Find the notice about the Columbia cyberattack and note the ID and confirmation code on it.
- Type columbiauniversitydatasettlement.com into your browser and open the Submit Claim page. Don't click links in unexpected texts or emails.
- Choose either documented losses or the alternative cash payment, and add credit monitoring if you want it.
- Upload proof if you are claiming losses, pick how you want to be paid, and submit.
- Save the confirmation. Mail-in claims must be postmarked by January 21, 2027.
Key dates for the Columbia University settlement
Opt-out and objection requests are due before the claim deadline. If you opt out you keep any right to sue Columbia yourself but get no settlement benefits; our guide to opting out explains when that makes sense. Payment timing has not been announced. The settlement site says nothing is paid unless the court approves the deal and it becomes final.
| Event | Date |
|---|---|
| Opt-out and objection deadline | December 22, 2026 |
| Claim deadline | January 21, 2027 |
| Final approval hearing | February 23, 2027 |
| Payments | Not announced |
Is the Columbia settlement legit?
Yes. It is a federal class action with a court case number, and the settlement site is run by Angeion Group. Scammers copy data breach settlements, so reach the claim page by typing the address yourself and never pay anyone to file. A real notice never asks for your Social Security number or bank login to "release" a payment. Our settlement scam checklist and the page on Angeion Group emails help you tell real notices from fakes.
What happens after you file
The court decides at the February 23, 2027 hearing whether to approve the settlement and lawyers' fees. After that, any appeals have to run out before money goes out. Payments, per ClaimDepot, can come by Zelle, PayPal, Venmo or mailed check. For realistic timelines, see how long settlement checks take.
Owed can help you find settlements like this one, explain them, open the official claim form, remind you before deadlines and track your claim; you still submit it yourself. Owed Pro is $2 for the first week, then $49 per year — one flat membership. Owed never takes a percentage of any payout. This post is general information, not legal advice; the court and the administrator decide eligibility and amounts.
Glossary
- Documented monetary losses
- Out-of-pocket costs caused by the breach that you can back up with records, such as fraud losses or bank fees.
- Alternative cash payment
- A payment with no set amount, based on what is left in the fund after other costs and claims.
- Final approval hearing
- The court hearing where a judge decides whether to approve the settlement and the lawyers' fees.
- Opt out
- Asking to be excluded so you keep the right to sue on your own and receive no settlement benefits.
- Settlement administrator
- The company the court approves to run the claims process; here, Angeion Group.
FAQ
Yes. It is In re Columbia University Data Breach Litigation, No. 1:25-cv-05541, in federal court in New York, with Angeion Group as administrator.
Up to $8,500 for documented losses, or an alternative cash payment that isn't a fixed amount. Two years of credit monitoring can be added.
January 21, 2027. Opt-outs and objections are due earlier, on December 22, 2026.
Only for the documented loss option, which requires supporting documentation. The official site doesn't say proof is needed for the cash payment.
ClaimDepot reports that people without a notice can't file. Use the Contact Us option on the settlement site to ask the administrator.
Not announced. Payments wait for final approval, with the hearing set for February 23, 2027, and any appeals.
- Official settlement website
- Official claim page
- ClaimDepot: Columbia University data settlement
- Insurance Journal coverage
This article is based on public information as of Nov 1, 2026; features, prices and deadlines change. Owed is not a law firm and nothing here is legal, tax or financial advice. Corrections →
Keep reading
Data breach settlement claims: how they pay and what to claimData breach settlement claims explained: flat cash, documented losses up to the cap, lost-time pay and credit monitoring — what proof works and how to file.
Data breach settlements open now: check if you're owedOpen data breach settlements in 2026: who qualifies, what you can claim without receipts, and how to spot fake settlement emails before you file.
Class action claim ID vs. notice ID: what if you don't have one?What a class action claim ID and notice ID are, where they come from, how to file without one, what to do if you lost the postcard, and how duplicates work.