University of Hawaii Data Breach Class Action Settlement

The University of Hawaii agreed to a $3.5 million class action settlement to resolve allegations stemming from a 2025 data breach. This incident involved a third party gaining unauthorized access to specific servers at the University of Hawaii Cancer Center, which support research operations in the center’s epidemiology division. The compromised data reportedly included names, Social Security numbers, driver’s license numbers, and private research-related information, though medical records for patients were stated to be unaffected.

Plaintiffs in the class action lawsuit alleged that the University of Hawaii failed to implement reasonable cybersecurity measures, which they claimed could have prevented the breach. The lawsuit seeks to resolve these allegations, and while the University of Hawaii has not admitted any wrongdoing, it has agreed to the settlement terms.

Class members can receive either a cash payment or reimbursement for documented data breach losses, with those experiencing extraordinary documented losses potentially receiving up to $5,000. All class members are entitled to one year of free medical data monitoring. To receive benefits, class members must submit a valid claim form by November 2, 2026, as the final approval hearing is set for November 4, 2026.