University of Hawaiʻi Cancer Center Reports Ransomware Data Exposure Affecting Up to 1.2 Million
Summary
The University of Hawaiʻi Cancer Center says ransomware affected its epidemiology division, with information on 87,493 study participants stolen and about 1.15 million additional historical records potentially affected. The group remains unidentified.
Key points
- The university said it discovered the ransomware incident on August 31, 2025, and that attackers encrypted servers supporting epidemiology research.
- Information reportedly accessed included Social Security numbers, Hawaiʻi driver’s license numbers, Honolulu voter registration records, and some health-related study files.
- The university said information on 87,493 study participants was stolen; about 1.15 million additional historical records with SSN identifiers may also have been affected.
- The incident affected a subset of research files, not the Cancer Center’s clinical trials operations, patient care, or other divisions.
- The university engaged law enforcement and cybersecurity experts, obtained a decryption tool, and said it received an affirmation that obtained information was destroyed.
- The responsible group has not been identified. University officials said there was no evidence the information had been published, shared, or misused, and investigations continue.
Article Details
- Victim Organization
- University of Hawaiʻi Cancer Center
- Incident Type
- Ransomware attack involving encryption of systems and likely data exfiltration
- Data Types Exposed
- Social Security numbers
- Driver’s license numbers
- Voter registration records
- Health-related study information
- Affected Records
- Information belonging to 87,493 study participants was reported stolen. Approximately 1.15 million additional historical records may have been affected, for up to approximately 1.2 million people potentially exposed.
- Operational Impact
- Encryption affected certain servers supporting the Cancer Center’s epidemiology research operations and delayed system restoration and impact assessment. The attack did not affect Clinical Trials operations, patient care, or other Cancer Center divisions. The university initiated a systemwide IT review.
- Ransom Or Extortion
- The university said it engaged with unidentified threat actors during the investigation. A cybersecurity firm obtained a decryption tool, and the university said it secured an affirmation that any information obtained was destroyed. No ransom payment for this incident was reported.
- Claim Status
- confirmed