Columbia University recently confirmed a major cyberattack that compromised personal, financial and health-related information tied to students, applicants and employees. The victims include current and former students, employees and applicants. Notifications to affected individuals began Aug. 7 and are continuing on a rolling basis.

Columbia, one of the oldest Ivy League universities, discovered the breach after a network outage in June. According to Columbia, the disruption was caused by an unauthorized party that accessed its systems and stole sensitive data. Investigators are still assessing the full scope of the theft.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER 

TRANSUNION BECOMES LATEST VICTIM IN MAJOR WAVE OF SALESFORCE-LINKED CYBERATTACKS, 4.4M AMERICANS AFFECTED

According to a breach notification filed with the Maine Attorney General's office, nearly 869,000 individuals were affected by the Columbia breach. This number includes students, employees, applicants and, in some cases, family members. Media outlets also reported that the threat actor claimed to have stolen approximately 460 gigabytes of data from Columbia's systems.

Columbia confirmed that the stolen information relates to admissions, enrollment and financial aid records, as well as certain employee data. The categories of exposed information include:

Columbia emphasized that patient records from Columbia University Irving Medical Center were not affected. Still, the breadth of stolen data poses serious risks of identity theft and fraud.

DIOR DATA BREACH EXPOSES US CUSTOMERS’ PERSONAL INFORMATION

Columbia has reported the incident to law enforcement and is working with cybersecurity experts. The university said it has strengthened its systems with new safeguards and enhanced protocols to prevent future incidents.

Starting Aug. 7, Columbia began mailing letters to those affected, offering two years of complimentary credit monitoring, fraud consultation and identity theft restoration services.

When contacted, Columbia referred CyberGuy to its official community updates, published June 24 and Aug. 5.

While the university says there is no evidence that the stolen data has been misused so far, the risk remains high. Criminals often wait months before exploiting stolen data.

NEARLY A MILLION PATIENTS HIT BY DAVITA DIALYSIS RANSOMWARE ATTACK

If you are among those affected or simply want to safeguard your data, take these steps today:

Check your credit reports regularly through AnnualCreditReport.com. Look for accounts you did not open or changes you did not authorize. 

Since Columbia confirmed that stolen files may include names, addresses and demographic details, consider using a personal data removal service. These services help scrub your information from data brokers and people search sites, making it harder for criminals to exploit exposed details. This step reduces the chance that stolen Columbia records are linked to your broader online identity.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice.  They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites.  It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet.  By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com/Delete

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com/FreeScan

Placing a fraud alert makes it harder for identity thieves to open accounts in your name. A credit freeze offers even stronger protection by blocking new credit applications.

Create long, complex passwords for each account. A password manager can help generate and securely store them.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager (see Cyberguy.com/Passwords) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials. 

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com/Passwords

Turn on two-factor authentication (2FA) wherever possible. This extra layer of security helps protect your accounts even if a password is stolen.

Scammers may try to exploit fear around the breach with fake emails or texts. Verify any message before clicking links or sharing personal information.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com/LockUpYourTech 

Beyond the free credit monitoring Columbia offers, additional paid services can help track your data across the dark web and provide extra safeguards.

Identity theft companies can monitor personal information like your Social Security number, phone number and email address and alert you if it is being sold on the dark web or being used to open an account.  They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. 

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com/IdentityTheft 

The Columbia University breach shows how even trusted institutions are vulnerable to cyberattacks. Because the investigation is ongoing and notifications will continue through the fall, individuals should remain on high alert. With so much personal, financial and health information exposed, staying alert long after the headlines fade is critical.

What more should universities and large institutions be required to do to safeguard the personal data of the people who trust them? Let us know by writing to us at Cyberguy.com/Contact

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER

Copyright 2025 CyberGuy.com.  All rights reserved. 

Congress wasn’t in session in August. But the Epstein files certainly were.

The Epstein files dominated Congress before the summer recess. But when lawmakers returned to Capitol Hill in recent days, the first thing lawmakers wrestled with were the Epstein files again.

Note: If you want something to go away, do not make it among the first orders of business.

The Epstein issue gurgled through the summer. And House Republicans did little to tamp down the embers by adjourning the body a day early in July – because they struggled to pass unrelated bills without delving into a complicated and sticky discussion of the Epstein files. Then, when the House returned, GOP leaders immediately prepped a resolution to formally bless an Epstein investigation by the Oversight Committee. The panel released some 32,000 pages of Epstein-related documents.

Just hours after returning to session, House Speaker Mike Johnson, R-La., and others met with Epstein accusers.

'NOT GOING AWAY': INSIDE THE EPSTEIN DRAMA THAT'S THROWN HOUSE GOP INTO CHAOS

That explains why the issue isn’t ebbing any time soon.

"It is very much a possibility that Jeffrey Epstein was an intelligence asset working for our adversaries," declared Rep. Anna Paulina Luna, R-Fla., after talking to the Epstein victims at the Capitol. "I think this is going to be a criminal investigation for sure. I will say that what's been released, obviously, the American people have wanted for a long time."

Before the recess, Reps. Thomas Massie, R-Ky., and Ro Khanna, D-Calif., teamed up to potentially bypass Johnson and compel the House to vote on releasing the Epstein files. The Epstein milieu quickly infected virtually every single legislative effort in Congress, effectively hamstringing the body. So Johnson cut everyone loose a bit early.

But the issue festered over the recess. Massie and Khanna were back with their parliamentary gambit to go over Johnson’s head and force an Epstein vote.

Lawmakers from both sides routinely convene press conferences at a spot just outside the Capitol called the "House Triangle." Lawmakers often use this venue to feature non-members or people specific to the legislation they’re pushing at the news conference.

Sometimes members bring a throng of people with them. A crowd occasionally gathers, depending on the issue.

But I had never before witnessed the multitude of people who showed up at the House Triangle on Wednesday morning to hear Massie, Khanna and victims talk about their effort to pry open the files. People spilled out onto the walkways and plaza. That forced U.S. Capitol Police to restrict access to the area.

Some of the victims recounted their Epstein stories in harrowing detail.

"When I got into the massage room, Jeffrey Epstein undressed and asked me to do things to him, my eyes welled up with tears. And I have never been more scared in my life," said Epstein accuser Haley Robson.

"I was even taken on a trip to Africa with former President Bill Clinton and other notable figures. In those moments, I realized how powerless I was," said Epstein victim Chauntae Davies.

EPSTEIN VICTIMS SET TO BREAK SILENCE AMID BIPARTISAN PUSH TO RELEASE FILES: 'PEOPLE ARE GOING TO BE OUTRAGED'

Massie and Khanna are deploying what’s called a "discharge petition." It’s a rarely successful gambit to go over the head of the Speaker and force a debate and vote on your issue – provided one can engineer 218 House signatures. If Massie and Khanna cobble together enough signatories, they may be able to force a vote later this month.

House GOP leaders are concerned about this. That’s why Johnson hoped to intervene with his own measure to formalize the House Oversight Committee’s inquiry into Epstein. But Johnson designed the measure in a way that the House could approve it – without taking a direct vote on it. That way, Republicans could point to angry constituents that they were in fact taking the Epstein files seriously – without an actual roll call vote documenting their position and perhaps infuriating President Donald Trump. Or, they could tell other constituents who wouldn’t want them to cross the President on Epstein to say they never directly voted on it at all. After all, it was buried in an unrelated measure.

Make sense?

But there was another motive behind the leadership’s unique parliamentary maneuver on Epstein: They wanted to give Republicans cover to say that the House was in fact addressing the Epstein issue. The move might coax fewer members to support the Massie/Khanna effort. That would prevent the House from taking a concrete vote tied to Epstein. But otherwise, the House may need to directly wrestle with it.

Massie called this a "political cover" to block his plan with Khanna to release the files.

Johnson fired back at Massie.

"I would not put much stock into what Thomas Massie says. The House Republicans have been very consistent about maximum disclosure and maximum transparency," said Johnson.

Trump long promised to release the files. But Trump’s position this week was to blame Democrats.

"This is a Democrat hoax that never ends. You know, it reminds me a little of the [President John F.] Kennedy situation. We gave them everything over and over again. More and more and more and nobody's ever satisfied," said Trump. "But it's really a Democrat hoax because they're trying to get people to talk about something that's totally irrelevant to the success that we've had as a nation since I've been president."

Massie suggested that Johnson is just trying to stay on Trump's good side by walking a political tightrope.

HOUSE OVERSIGHT COMMITTEE RELEASES THOUSANDS OF EPSTEIN DOCUMENTS

"The Speaker is wrestling with [whether] he's going to have to choose between supporting Donald Trump’s new position that the files shouldn't be released, or finding justice for these victims and survivors. The Speaker probably doesn't appreciate that he's going to have to choose one," said Massie. "The Speaker's position depends on him not just rubber-stamping but reinforcing anything Donald Trump wants, even if Donald Trump is wrong. So the Speaker is in a tough spot."

The materials coughed up by the Oversight panel did include a new video of the so-called "missing minute." It fills in absent footage from Epstein’s New York jail cell on the night he died.

But Massie insists on the release of more material.

"What's clear is they're not redacting, just to protect victims. They are redacting to protect the reputations of people," said Massie.

One Republican aligned with the President threatened to out those linked to Epstein.

"I'm not afraid to name names," said Rep. Marjorie Taylor Greene, R-Ga., at the press conference. "So if they want to give me a list, I will walk into that Capitol on the House floor, and I'll say every damn name that abused these women."

Khanna was buoyed by the support of Greene.

"I've never done a press conference with Marjorie Taylor Greene before," said the progressive Khanna. "I don't think Marjorie Taylor Greene would be part of a stunt against President Trump."

We’ll know soon if the House has the votes to thwart the GOP leadership and consider the Massie/Khanna resolution. And tangling with the Epstein matter could even start to impact the ability of the House to wrestle with routine legislation again.

And so, the Epstein saga continues. The same as it was before the August recess.