Overview
- UH confirms an August 31, 2025 ransomware attack on its Epidemiology Division led to data theft and extensive system encryption.
- Records potentially exposed include names, Social Security numbers, driver’s license numbers, voter registration data, and limited research and health information.
- The impacted population comprises 87,493 Multiethnic Cohort Study participants and roughly 1.15 million individuals listed in legacy state driver’s license and voter registration files.
- Officials say they obtained a decryption tool and assurances of data destruction from the threat actors, while reports differ on whether a ransom was paid.
- Notifications began in late February with 12 months of free credit monitoring offered, and investigators from law enforcement and external cybersecurity firms remain engaged.