Columbia University (NY, United States) notified the Texas Attorney General of a data breach on 20 May 2026. It told that state about 161,544 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information and Financial account and card details and more. The breach began on 16 May 2025, 369 days before it was reported.
Breach reported 20 May 2026
Status
Confirmed breach
People affected
161,544 Texas residents (one state’s count; the total can be higher)
Reported
20 May 2026
Breach began
16 May 2025
Time to tell
369 days (the median in California’s notices over the last year: 154 days)
Look for Columbia University’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Check your health insurer’s statements for treatment you never had.
Expect scams that use your details: calls, texts or emails pretending to be Columbia University, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked