Columbia University confirmed that a politically motivated hacker infiltrated its IT systems, stealing sensitive student and employee data in a breach that occurred late last week. The attacker gained unauthorized access through a phishing campaign targeting administrative credentials, according to the university’s cybersecurity team.
The university disclosed that affected data includes names, student ID numbers, academic records, and possibly limited financial aid information. Affected students have been notified, and identity monitoring services are being offered free of charge.
Law enforcement agencies, including the FBI and Homeland Security, are currently investigating the breach. Early findings suggest that the attacker may be linked to an Eastern European hacktivist group known for targeting Western academic institutions.
University President Minouche Shafik condemned the act, stating, “Our commitment to academic freedom and data security remains unwavering, and we will continue to strengthen our systems to prevent future incidents.” The attack has raised alarms across the Ivy League, prompting other institutions to audit their own digital security frameworks.