Hawaii Cancer Center ransomware exposes 1.2M records

The personal information of approximately 1.2 million people was compromised in a ransomware attack at the University of Hawaiʻi Cancer Center. The incident occurred on 31 August 2025 and affected servers supporting the centre’s research operations, with no impact on clinical operations or patient care. The compromised data included names, Social Security numbers, driving licence details, voter registration records, and health-related information.

The university says that 87,493 study participants’ records were among the affected data. In addition, the records of around 1.15 million other individuals were compromised, including names, driving licence details, Social Security numbers, and voter registration records, though there was no impact on the Cancer Center’s clinical trials operations or student records.

The university is providing 12 months of free credit monitoring and identity theft services to impacted individuals, and says its investigation continues with support from law enforcement and cybersecurity experts.