University of Hawai’i data breach settlement
What happened?
The University of Hawai’i agreed to pay $3.5 million to settle a class action over an August 2025 cyberattack on research systems at its Cancer Center. People the university notified that their information may have been exposed can claim cash and free medical data monitoring. The university denies wrongdoing.
In late August 2025, the University of Hawai’i found that an unauthorized party had gotten into research systems used by the epidemiology division of its Cancer Center. The files involved may have held names with Social Security or driver's license numbers and research study information. The university says patient care and clinical trials were not affected.
The class is living people in the United States whom the university notified that their information was potentially compromised. The court put the class at about 1.2 million people. Your notice has the Unique ID and PIN you need to file online. If you expected a notice, check your spam folder or call the administrator at 1-877-417-7187.
You can pick one of two cash options. The first is an estimated $50 with no documents; the final amount may rise or fall with the number of valid claims. The second is up to $5,000 for documented losses from fraud or identity theft that came directly from the breach. Any class member can also add one year of medical data monitoring on the claim form.
File online at the settlement site with your Unique ID and PIN, or download the paper claim form and mail it, by November 2, 2026. The deadline to opt out or object is October 19, 2026. The court will hold the final approval hearing on November 4, 2026 in Honolulu. Payments come only after final approval and any appeals.
How much is University of Hawai’i paying and what can I get?
Pick one cash option. Either an estimated $50 payment with no documents (the final amount can go up or down depending on how many valid claims are filed), or up to $5,000 for documented losses from fraud or identity theft that came directly from the breach. Everyone in the class can also choose one year of free medical data monitoring.
The total settlement fund is $3,500,000. The final amount per person depends on how many valid claims are filed.
Am I eligible to file a claim?
Living people in the United States whom the University of Hawai’i notified that their private information was potentially compromised in the 2025 University of Hawai’i Cancer Center data incident.
Key facts
Last reviewed Oct 18, 2026. Every detail on this page is checked against official settlement administrator and court sources before publication. Where those sources disagree with information shown elsewhere, the official settlement notice controls.
Owed is an independent service and is not a law firm, a court, a government agency, or the settlement administrator. Whether you qualify, and any amount or date shown, is decided by the settlement administrator and the court, not by Owed. Payment figures are estimates and can change without notice.
You can also file directly with the settlement administrator at no cost. Owed members get the official claim form, deadline reminders and claim tracking in one place.
This page is a plain-language summary, not legal advice, and does not create an attorney-client relationship. University of Hawai’i and related names are trademarks of their respective owners; Owed uses them only to identify the settlement described on this page and is not affiliated with, endorsed by, or sponsored by University of Hawai’i, the court, or the settlement administrator.
Read our full disclaimerLast updated · verified against the official settlement notice