University of Hawaiʻi Cancer Center Data Breach Investigation

‍

University of Hawaiʻi Cancer Center Data Breach Investigation

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating a significant data breach involving the University of Hawaiʻi Cancer Center that may have exposed the personal information of more than one million individuals.

‍

What Happened In This Data Breach?

The University of Hawaiʻi Cancer Center recently disclosed that it experienced a cybersecurity incident tied to a ransomware attack that was initially detected on August 31, 2025. The breach was publicly announced on February 28, 2026, following an extensive forensic investigation.

According to the university, the attack targeted servers within its Epidemiology Division, where large volumes of historical research data were stored. While the university reported that patient care systems, clinical trial data, and student records were not impacted, certain research-related datasets were encrypted and may have been accessed by an unauthorized party.

Due to the scope and complexity of the incident, the university engaged cybersecurity professionals and ultimately paid a ransom in an effort to regain access to its systems and secure assurances regarding the handling of the data.

‍

Who Was Affected

The breach is believed to impact approximately 1.24 million individuals. This includes roughly 87,000 participants in the Multiethnic Cohort Study, along with more than one million individuals whose information was contained in historical state records.

These records reportedly include older datasets such as driver’s license information and voter registration files dating back to the late 1990s and early 2000s.

‍

What Information Was Involved

The information potentially exposed in this incident may include highly sensitive personal data such as names, Social Security numbers, and driver’s license information. In some cases, research-related data and health questionnaires may also have been involved.

Because this type of information does not change over time, it can present long-term risks for identity theft, financial fraud, and other forms of misuse.

‍

Potential Risks to Individuals

Exposure of Social Security numbers and government-issued identification can significantly increase the risk of identity theft. Individuals affected by this breach may face risks such as fraudulent tax filings, unauthorized financial accounts, medical identity theft, and targeted phishing attempts.

Even if assurances were provided regarding the deletion of the data, once sensitive information is exposed, the risk can remain for years.

‍

What You Should Do

If you believe your information may have been involved, it is important to remain vigilant. Monitoring your financial accounts, reviewing your credit reports, and taking advantage of any identity protection services offered can help reduce potential harm.

You may also consider placing a credit freeze or fraud alert to prevent unauthorized activity.

‍

How Our Firm Can Help

Data breaches of this magnitude raise serious concerns about how sensitive information is stored and protected. Organizations that collect and maintain personal data have a responsibility to implement reasonable security measures to safeguard that information.

If your personal information was exposed in the University of Hawaiʻi Cancer Center data breach, you may have legal rights.

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is actively investigating this incident and evaluating potential claims on behalf of affected individuals.

‍

Contact Us for a Free Case Evaluation

If you received notice of this data breach or believe your information may have been compromised, call (205) 322-8880 or contact our firm online to request a free and confidential case evaluation. Our attorneys are available to help you understand your rights and explore your legal options.

‍

Links:

[1] https://hawaii.edu/cancercenter/incident/