Technology
Columbia University data breach hits 870,000 people
NEWYou can now listen to Fox News articles!
Columbia University recently confirmed a major cyberattack that compromised personal, financial and health-related information tied to students, applicants and employees. The victims include current and former students, employees and applicants. Notifications to affected individuals began Aug. 7 and are continuing on a rolling basis.
Columbia, one of the oldest Ivy League universities, discovered the breach after a network outage in June. According to Columbia, the disruption was caused by an unauthorized party that accessed its systems and stole sensitive data. Investigators are still assessing the full scope of the theft.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER
TRANSUNION BECOMES LATEST VICTIM IN MAJOR WAVE OF SALESFORCE-LINKED CYBERATTACKS, 4.4M AMERICANS AFFECTED
Students on the campus of Columbia University April 14, 2025, in New York City. (Charly Triballeau/AFP via Getty Images)
What information was stolen?
According to a breach notification filed with the Maine Attorney General’s office, nearly 869,000 individuals were affected by the Columbia breach. This number includes students, employees, applicants and, in some cases, family members. Media outlets also reported that the threat actor claimed to have stolen approximately 460 gigabytes of data from Columbia’s systems.
Columbia confirmed that the stolen information relates to admissions, enrollment and financial aid records, as well as certain employee data. The categories of exposed information include:
- Names, dates of birth and Social Security numbers
- Contact details and demographic information
- Academic history and financial aid records
- Insurance details and certain health information
Columbia emphasized that patient records from Columbia University Irving Medical Center were not affected. Still, the breadth of stolen data poses serious risks of identity theft and fraud.
DIOR DATA BREACH EXPOSES US CUSTOMERS’ PERSONAL INFORMATION
Columbia University campus (Luiz C. Ribeiro for New York Daily News/Tribune News Service via Getty Images)
Columbia University response
Columbia has reported the incident to law enforcement and is working with cybersecurity experts. The university said it has strengthened its systems with new safeguards and enhanced protocols to prevent future incidents.
Starting Aug. 7, Columbia began mailing letters to those affected, offering two years of complimentary credit monitoring, fraud consultation and identity theft restoration services.
When contacted, Columbia referred CyberGuy to its official community updates, published June 24 and Aug. 5.
While the university says there is no evidence that the stolen data has been misused so far, the risk remains high. Criminals often wait months before exploiting stolen data.
NEARLY A MILLION PATIENTS HIT BY DAVITA DIALYSIS RANSOMWARE ATTACK
Columbia University says a June network outage is to blame for the breach. (Silas Stein/picture alliance via Getty Images)
Steps to protect yourself after the Columbia University breach
If you are among those affected or simply want to safeguard your data, take these steps today:
1) Monitor your credit reports
Check your credit reports regularly through AnnualCreditReport.com. Look for accounts you did not open or changes you did not authorize.
2) Use a personal data removal service
Since Columbia confirmed that stolen files may include names, addresses and demographic details, consider using a personal data removal service. These services help scrub your information from data brokers and people search sites, making it harder for criminals to exploit exposed details. This step reduces the chance that stolen Columbia records are linked to your broader online identity.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com/Delete
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com/FreeScan
3) Set up fraud alerts and freezes
Placing a fraud alert makes it harder for identity thieves to open accounts in your name. A credit freeze offers even stronger protection by blocking new credit applications.
4) Use strong and unique passwords
Create long, complex passwords for each account. A password manager can help generate and securely store them.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager (see Cyberguy.com/Passwords) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2025 at Cyberguy.com/Passwords
5) Enable two-factor authentication
Turn on two-factor authentication (2FA) wherever possible. This extra layer of security helps protect your accounts even if a password is stolen.
6) Watch for phishing attempts and use strong antivirus software
Scammers may try to exploit fear around the breach with fake emails or texts. Verify any message before clicking links or sharing personal information.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com/LockUpYourTech
7) Consider identity theft protection services
Beyond the free credit monitoring Columbia offers, additional paid services can help track your data across the dark web and provide extra safeguards.
Identity theft companies can monitor personal information like your Social Security number, phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.
See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com/IdentityTheft
Kurt’s key takeaways
The Columbia University breach shows how even trusted institutions are vulnerable to cyberattacks. Because the investigation is ongoing and notifications will continue through the fall, individuals should remain on high alert. With so much personal, financial and health information exposed, staying alert long after the headlines fade is critical.
What more should universities and large institutions be required to do to safeguard the personal data of the people who trust them? Let us know by writing to us at Cyberguy.com/Contact
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Now the FAA says gamers are the answer to its air traffic controller shortage
The Federal Aviation Administration (FAA) has struggled for years to have enough air traffic controllers to address shortages, with the US Government Accountability Office (GAO) saying in January that the number of people in the job in the US has declined by around 6 percent “in the last decade.” Now the Trump administration is rolling out a recruiting campaign targeting gamers ahead of the opening of the annual air traffic control hiring window on April 17th.
Even with the campaign, getting qualified individuals through training and into the role may still be a challenge: according to the Department of Transportation’s Office of Inspector General (OIG), the FAA is facing “considerable challenges with training, including a shortage of qualified instructors, training capacity limitations, an outdated curriculum, and high training failure rates.”
An FAA video full of clips of things like Madden NFL, Fortnite, League of Legends esports, and the Xbox One stinger from commercials promises an average salary of $155,000 per year after three years and says that “you’ve been training for this.”
In a press release, the FAA says that air traffic controllers said in exit interviews that gaming was an influence on “their ability to think quickly, stay focused, and manage complexity.” The FAA’s website about the application process encourages applicants to “level up” their career. However, the Trump administration isn’t the first to target gamers for the role; according to The New York Times, the Biden administration launched a “Level Up” recruiting push in 2021, encouraging gamers as well as women and members of minority groups to become air traffic controllers.
Getting more air traffic controllers has been a focus for Sean Duffy, President Trump’s secretary of transportation, and he announced a plan to “supercharge” hiring shortly after he was sworn in for the job last year. That campaign closed in March 2025 and “attracted more than 10,000 applications,” resulting in about 600 trainees entering the Controller Training Academy, the OIG says. And the GAO says that some attrition during the air traffic controller hiring process “may be preventable,” noting that the hiring process can be “difficult to navigate” and that applicants may have already accepted other jobs by the time they get an employment offer.
The National Air Traffic Controllers Association (NATCA), the union representing air traffic controllers, “welcomes innovative approaches to expanding the candidate pool,” including “outreach to individuals with high-level aptitude skills such as gamers,” according to a statement from NATCA president Nick Daniels.
Technology
Google search led to a costly scam call
NEWYou can now listen to Fox News articles!
You book a flight. You reschedule. Then you try to handle travel insurance quickly so you can move on with your day. That’s exactly what happened to Rosette. She was trying to reach Allianz, a large travel insurance company that many airlines direct customers to after booking.
Within seconds, she was talking to a scammer who sounded completely legitimate. Here’s how she described it:
“I Googled Allianz and clicked on the phone number. It was answered within 1 second. . . . It was NOT Allianz I was speaking to. They have my Citicard number and my date of birth. . . . When I questioned it, he said ‘I will not charge your card’ and disconnected.”
That realization hits hard. Suddenly, you start replaying everything in your head. Maybe you thought you knew what to look for. Still, the frustration sets in fast. Here’s the truth: This happens every day to smart, careful people. And the scams keep getting more convincing.
TECH GIANTS UNITE TO FIGHT ONLINE SCAMS
Fake phone numbers in search results are fueling a surge in travel insurance scams targeting unsuspecting callers. (Yuliya Taba/Getty Images)
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com — trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
How this fake travel insurance phone scam works
This is known as a search result scam, and it is one of the fastest-growing fraud tactics right now.
Here’s the typical playbook:
- You search for a company like a travel insurance provider, airline or your bank
- A fake phone number appears at the top of the results or in an ad
- You call and reach a professional-sounding call center
- The scammer acts helpful, fast and confident
- They ask for payment details or personal information
In Rosette’s case, there were several clear signs once you step back:
- The call was answered instantly
- The pricing felt unusually high
- The email came from a fake domain
- The agent pushed for authorization
Once she questioned it, the scammer disconnected. That’s classic behavior.
Why this phone scam is so easy to fall for
This is not sloppy fraud. It’s polished, fast and designed to catch you when you are distracted. Here’s why it works so well:
1) You trust search results
Most people assume search results are safe. Scammers exploit that trust with fake listings and ads.
2) Timing creates pressure
You are often dealing with travel changes, delays or deadlines. That lowers your guard.
3) They sound legitimate
These are not obvious scammers. Many operate scripted call centers with trained agents.
4) They move fast
Answering within seconds creates the illusion that you reached the right company.
SSA IMPERSONATION SCAMS ARE GETTING MORE PERSONAL
A quick Google search led one woman to a convincing scam call center posing as a legitimate insurer. (golibo/Getty Images)
What information did the scammer actually get?
In Rosette’s situation, the scammer obtained:
- Credit card number
- Date of birth
That combination matters. Even without an immediate charge, scammers often:
- Test small transactions later
- Attempt identity-based fraud
- Sell your data to other criminals
This is why you should treat it as a compromised card situation, even if nothing has been charged yet.
What this means to you
This type of scam does not rely on hacking your device. It relies on tricking you into calling the wrong number. That means anyone can fall for it.
You could be booking travel, fixing a billing issue or calling tech support. One wrong click puts you in direct contact with a scammer who already sounds like the real company.
The danger is not just the initial call. It is what happens next if your information is reused or shared.
How to protect yourself from fake phone scams
Here’s how to protect yourself from this exact scenario moving forward:
1) Never trust phone numbers from search results
Always go directly to the company’s official website and find the contact page there.
2) Use the number on your card or confirmation email
These are far more reliable than anything you find through a quick search.
3) Watch for instant answers and pressure
Real companies rarely answer instantly and push for immediate payment details.
WHY THAT $4 CHARGE ON YOUR STATEMENT COULD BE FRAUD
A traveler searching for Allianz support reached a scammer instead, exposing personal and financial information in seconds. (fizkes/Getty Images)
4) Check the email domain carefully
If it does not match the official company domain, it is a red flag.
5) Replace compromised cards immediately
Do not wait for fraud to appear. Request a new card number right away.
6) Turn on real-time alerts
Enable transaction alerts so you can catch suspicious activity early.
7) Freeze your credit if personal data is exposed
This adds a strong layer of protection against identity theft.
8) Consider identity theft protection
If your personal information was exposed, identity theft protection can monitor your identity, alert you to suspicious activity and help you respond quickly if something goes wrong. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.
9) Remove your personal data from public databases
Data broker sites collect and sell your personal details. Removing your information reduces the chances scammers can find and target you again. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
What Rosette did right
It’s important to call this, out because it matters.
- She questioned the pricing
- She challenged the caller
- She stopped before a charge went through
- She contacted her bank quickly
Those steps significantly reduced the damage. This could have gone much further.
Kurt’s key takeaways
Scams like this are not about being careless. They are about being human. You were trying to solve a problem quickly. The scammer was ready for that exact moment. The biggest takeaway is simple: Slow down when money or personal information is involved. Even a few extra seconds to verify a phone number can make all the difference. And if something feels off, trust that instinct.
If you needed to call your bank or airline right now, would you trust the first number you see online? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com — trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Microsoft starts removing Copilot buttons from Windows 11 apps
Microsoft is starting to remove “unnecessary” Copilot buttons from its Windows 11 apps. In the latest version of the Notepad app for Windows Insiders, Microsoft has removed the Copilot button in favor of a “writing tools” menu. The Copilot button in the Snipping Tool app also no longer appears when you select an area to capture.
The change is part of “reducing unnecessary Copilot entry points, starting with apps like Snipping Tool, Photos, Widgets and Notepad,” that Microsoft promised to complete as part of its broader plan to fix Windows 11. While Copilot buttons are being removed, it looks like the underlying AI features are here to stay, though.
The Copilot button has been removed from Notepad, but the writing tools replacement still uses AI-powered features and looks like the identical menu of options that existed before. I still think these features are largely unnecessary in what’s supposed to be a lightweight text app, but removing the superfluous Copilot branding is a good first step.
-
Atlanta, GA6 days ago1 teenage girl killed, another injured in shooting at Piedmont Park, police say
-
Education1 week agoVideo: YouTube’s C.E.O. on the Rise of Video and the Decline of Reading
-
Movie Reviews1 week agoVaazha 2 first half review: Hashir anchors a lively, chaos-filled teen tale
-
Education1 week agoVideo: Toy Testing with a Discerning Bodega Cat
-
Georgia4 days agoGeorgia House Special Runoff Election 2026 Live Results
-
Pennsylvania4 days agoParents charged after toddler injured by wolf at Pennsylvania zoo
-
Arkansas14 hours agoArkansas TV meteorologist Melinda Mayo retires after nearly four decades on air
-
Milwaukee, WI5 days agoPotawatomi Casino Hotel evacuated after fire breaks out in rooftop HVAC system