On March 22, 2025, a significant data breach at New York University (NYU) exposed the personal information of over 3 million applicants. This incident has prompted an investigation into the possibility of a class action lawsuit.
The NYU Data Breach: What Happened?
Hackers compromised NYU’s website for approximately two hours. The breach exposed sensitive data including names, test scores, majors, zip codes, family and financial aid details, citizenship status, and Common Application information. This data included records of both accepted and rejected applicants, dating back to 1989.
During the attack, a defaced webpage displayed purported average SAT scores, ACT scores, and GPAs for the 2024–25 admissions cycle. The hackers also included accusations that the data reflected continued disparities following the Supreme Court’s 2023 ruling against affirmative action.
A Reddit user reported the breach around 10:30 a.m., noting that four CSV files containing admissions data were openly accessible. NYU’s website was restored by noon.
In a statement, NYU spokesperson John Beckman confirmed the “malicious hack” and stated that law enforcement had been notified. NYU is currently reviewing its security protocols and advising applicants to remain vigilant against potential identity theft.
Impact and Impacted Data
The breach affected a wide range of sensitive data:
- Demographic Information
- Personal Information
- Financial Aid Information
- Financial Details
- Test Scores
The Class Action Lawsuit Investigation
Attorneys are investigating whether a class action lawsuit can be filed on behalf of those affected by the NYU data breach. They are seeking to hear from individuals who applied to NYU during the period the data was compromised.
If the lawsuit is successful, it could provide compensation for:
- Loss of privacy
- Time spent dealing with the breach
- Out-of-pocket costs
A successful case could also compel NYU to improve its data security practices.
What You Can Do
If you applied to NYU and believe your information was compromised, you can fill out the form on this page to learn more about the investigation and potentially participate in the class action lawsuit.
