Where does the New York University case file come from?

Every entry is taken from the breach report New York University lodged with the California Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: New York University Data Breach

This file collects the dated facts on record for the New York University incident. The state report is dated June 9, 2025. The incident itself is dated October 20, 2024.

Timeline

232 days separate the incident date from the date it was reported.

October 20, 2024Incident dateWhen the filing says the breach took place.
June 9, 2025Report filed in CaliforniaDate the notice was lodged with the California Attorney General.

Case facts

Filing state: California
Date reported: June 9, 2025
Incident date: October 20, 2024
Receiving office: California Attorney General

Case notes

New York University has formally reported a data breach, indicating an incident took place on October 20, 2024. The university filed notice regarding this event on June 9, 2025, detailing that certain personal information was involved.

The specific categories of information impacted by this breach have not been detailed in the public filing. However, individuals should be aware that their personal data may have been compromised. This underscores the importance of staying vigilant following such disclosures.

The reported breach, originating from an incident on October 20, 2024, is currently under investigation by New York University. This information is based on public filings made with regulators in California, as required by law.

While the investigation proceeds, affected individuals are encouraged to take proactive measures to safeguard their information. It is advisable to closely monitor all personal accounts and financial statements for any unusual activity. Be cautious of unsolicited communications, such as emails, texts, or phone calls, that request personal details.

Should you receive an official notification letter from New York University regarding this incident, it is important to carefully read it for specific instructions and resources they may be offering. Always verify the legitimacy of any communication before acting on its advice.

Questions about this case file

Where does the New York University case file come from?: Every entry is taken from the breach report New York University lodged with the California Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

California data breaches

Filing source: California Attorney General

Named in the New York University breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More California case files