COLUMBIA BREACH EXPOSED SSNs OF NON-AFFILIATED PEOPLE

The breach, which the university first disclosed last year, affected a broader population than initially stated. Columbia now acknowledges that victims include people who never attended or worked at the institution. Details on how non-affiliated individuals' data ended up in Columbia's systems remain unclear. The university has not specified the total number of exposed records or disclosed how external parties' information was collected or stored. Affected individuals have been notified and Columbia is offering credit monitoring services. The incident raises questions about data retention practices and why the university held personal information on people outside its community. Columbia has not announced findings from a formal investigation into the breach's cause or scope. The university recommends affected parties monitor their credit reports and consider fraud alerts with credit bureaus.