In late February 2026, the University of Hawai'i Cancer Center, specifically its Epidemiology Division, disclosed a cyberattack that was discovered around August 31, 2025. This incident potentially affected approximately 1.2 million individuals when the center was affected by a ransomware attack.
The breach compromised various types of personal data, including Social Security Numbers (SSNs), driver's license numbers, names, voter registration data, Department of Transportation records, and research-related health information from multiple epidemiological studies. The university began mailing notification letters to affected individuals in late February 2026 and offered 12 months of credit monitoring and identity theft services. The full scope of affected states has not been publicly confirmed.
Details about data breaches can emerge over time, and notification processes can sometimes be delayed.