University of Hawaiʻi Cancer Center confirms data leak following ransomware attack

The University of Hawaiʻi Cancer Center detected a ransomware attack (discovered Aug 31, 2025) on epidemiology research servers that encrypted and likely exfiltrated files containing sensitive PII—including SSNs and driver’s license numbers—affecting 87,493 study participants and potentially up to ~1.15 million additional individuals from historical records. The university engaged with the attackers, obtained a decryption tool, notified law enforcement, and hired cybersecurity experts; there is no identified threat actor and no evidence reported that the stolen information has been published or misused.