Columbia University data breach settlement: claims due January 21

To receive any of the benefits described in Question 8 (other than the Business Practice Commitments), you must submit a Valid Claim , postmarked or submitted online by January 21, 2027 . Claim Forms may be submitted online or printed here and mailed to the Settlement Administrator at the address on the Claim Form. The quickest way to submit a Claim is online. Claim Forms are also available by calling 1-833-617-4373 or by writing to: Columbia University Data Settlement Administrator 1650 Arch Street, Suite 2210 Philadelphia, PA 19103 This is a closed class and the benefits described herein are available only to Settlement Class Members with a unique Notice ID Number. Claims submitted by non-Settlement Class Members will be rejected. Claim Forms must be submitted online by, or by mail postmarked by, January 21, 2027 .

Official settlement FAQFAQ 11: How do I make a Claim for Settlement benefits? (complete public page JSON answer)

You are part of the Settlement Class if you are an individual residing in the United States whose Private Information was potentially accessed by one or more unauthorized third parties during the Cyberattack including if you were sent notice of the Cyberattack. Columbia estimates that there are 2,973,631 Settlement Class Members.

Official settlement FAQFAQ 5: How do I know if I am part of the Settlement? (complete public page JSON answer)

Yes. Excluded from the Settlement Class are (a) Defendant and Defendant’s parents, subsidiaries, affiliates, officers and directors, and any entity in which Defendant has a controlling interest; (b) all individuals who make a timely election to be excluded from this proceeding using the correct protocol for opting out; (c) Defendant’s Counsel, as well as their immediate family members; and (d) all judges assigned to hear any aspect of this litigation, as well as their immediate family members.

Official settlement FAQFAQ 6: Are there exceptions to being included in the Settlement? (complete public page JSON answer)

To receive any of the benefits described in Question 8 (other than the Business Practice Commitments), you must submit a Valid Claim , postmarked or submitted online by January 21, 2027 . Claim Forms may be submitted online or printed here and mailed to the Settlement Administrator at the address on the Claim Form. The quickest way to submit a Claim is online. Claim Forms are also available by calling 1-833-617-4373 or by writing to: Columbia University Data Settlement Administrator 1650 Arch Street, Suite 2210 Philadelphia, PA 19103 This is a closed class and the benefits described herein are available only to Settlement Class Members with a unique Notice ID Number. Claims submitted by non-Settlement Class Members will be rejected. Claim Forms must be submitted online by, or by mail postmarked by, January 21, 2027 .

Official settlement FAQFAQ 11: How do I make a Claim for Settlement benefits? (complete public page JSON answer)

If you are a Settlement Class Member and you timely submit a Valid Claim, you may be eligible for the following Settlement benefits: (1) Reimbursement for Documented Monetary Losses: With supporting documentation showing you incurred losses as a result of the Cyberattack, you may be eligible for reimbursement up to $8,500.00. OR (2) Alternative Cash Payment: You may elect to receive an Alternative Cash Payment. The amount shall be determined by distributing the remaining Settlement Fund after deduction or payment of Court-approved attorneys’ fees and litigation expenses, Service Awards, Settlement Administration Costs, Credit Monitoring costs, and approved claims for Documented Monetary Losses. AND (3) Credit Monitoring and Identity Theft Protection Services: In addition to receiving reimbursement for Documented Monetary Losses or a cash payment, you may elect to receive – at no cost to you – two (2) years of free three-bureau credit monitoring services, dark web monitoring, identity theft insurance coverage for up to $1,000,000, and fully managed identity recovery services. (4) Business Practice Commitments: Although Defendant denies any wrongdoing or liability, Defendant has already and is continuously implementing additional security enhancements including defensive tools and increased monitoring. Defendant has committed to maintain its additional security measures for a period of 3 years following the effective date of this Settlement.

Official settlement FAQFAQ 8: What does the Settlement provide? (complete public page JSON answer)

The amount of your payment will depend on the approved amount of your claim and the total value of all approved claims. It is anticipated that the Settlement Fund will be sufficient to provide cash payments to all Settlement Class Members who submit eligible claims. However, the amount of your payment may be reduced on a pro rata basis depending on the number of claims submitted. If you are claiming Documented Monetary Losses under the Settlement, you must provide supporting information, including (1) the Claim Form; (2) documentation supporting your Claim; and (3) a sworn, brief description of the nature of the loss, if the nature of the loss is not apparent from the documentation alone. Documentation supporting Documented Monetary Losses can include receipts or other documentation not “self-prepared” by you that documents the costs incurred. “Self-prepared” documents such as handwritten receipts are, by themselves, insufficient to receive reimbursement, but can be considered to add clarity to or support other submitted documentation. You will not be reimbursed for expenses if you have been reimbursed for the same expenses by another source, including compensation provided in connection with any credit monitoring and identity theft protection product. For Documented Monetary Losses, you must also show that: (1) the timing of the loss occurred on or after May 16, 2025; and (2) the Private Information used to commit identity theft or fraud consisted of the same type of Private Information that was potentially exposed in the Cyberattack. If your award for claimed Documented Monetary Losses would for any reason be less than the Alternative Cash Payment that would otherwise be awarded, you will be awarded the larger amount.

Official settlement FAQFAQ 13: How much will my payment be? (complete public page JSON answer)

If you submit a timely and Valid Claim, payment will be made to you by the Settlement Administrator after the Settlement is approved by the Court and becomes final. It may take time for the Settlement to be approved and become final. Please be patient and check this website for updates.

Official settlement FAQFAQ 14: When will I receive my Settlement benefits? (complete public page JSON answer)

Class Counsel will file a motion asking the Court to award attorneys’ fees of up to 25% ($4,031,250.00) of the $16,125,000 Settlement Fund, plus reimbursement of out-of-pocket litigation expenses. The Court may award less than the amount requested. Class Counsel will also request approval of Service Awards of five hundred dollars ($500) for each of the Class Representatives. If awarded by the Court, the Settlement Administrator will pay attorneys’ fees, litigation expenses, and service awards out of the Settlement Fund. Class Counsel’s motion for Attorneys’ Fees, Litigation Expenses, and Service Awards will be made available on this Settlement Website before the deadline for you to object to or opt out of the Settlement.

Official settlement FAQFAQ 17: How will Class Counsel be paid? (complete public page JSON answer)

The amount of your payment will depend on the approved amount of your claim and the total value of all approved claims. It is anticipated that the Settlement Fund will be sufficient to provide cash payments to all Settlement Class Members who submit eligible claims. However, the amount of your payment may be reduced on a pro rata basis depending on the number of claims submitted. If you are claiming Documented Monetary Losses under the Settlement, you must provide supporting information, including (1) the Claim Form; (2) documentation supporting your Claim; and (3) a sworn, brief description of the nature of the loss, if the nature of the loss is not apparent from the documentation alone. Documentation supporting Documented Monetary Losses can include receipts or other documentation not “self-prepared” by you that documents the costs incurred. “Self-prepared” documents such as handwritten receipts are, by themselves, insufficient to receive reimbursement, but can be considered to add clarity to or support other submitted documentation. You will not be reimbursed for expenses if you have been reimbursed for the same expenses by another source, including compensation provided in connection with any credit monitoring and identity theft protection product. For Documented Monetary Losses, you must also show that: (1) the timing of the loss occurred on or after May 16, 2025; and (2) the Private Information used to commit identity theft or fraud consisted of the same type of Private Information that was potentially exposed in the Cyberattack. If your award for claimed Documented Monetary Losses would for any reason be less than the Alternative Cash Payment that would otherwise be awarded, you will be awarded the larger amount.

Official settlement FAQFAQ 13: How much will my payment be? (complete public page JSON answer)

To receive any of the benefits described in Question 8 (other than the Business Practice Commitments), you must submit a Valid Claim , postmarked or submitted online by January 21, 2027 . Claim Forms may be submitted online or printed here and mailed to the Settlement Administrator at the address on the Claim Form. The quickest way to submit a Claim is online. Claim Forms are also available by calling 1-833-617-4373 or by writing to: Columbia University Data Settlement Administrator 1650 Arch Street, Suite 2210 Philadelphia, PA 19103 This is a closed class and the benefits described herein are available only to Settlement Class Members with a unique Notice ID Number. Claims submitted by non-Settlement Class Members will be rejected. Claim Forms must be submitted online by, or by mail postmarked by, January 21, 2027 .

Official settlement FAQFAQ 11: How do I make a Claim for Settlement benefits? (complete public page JSON answer)