

University of Hawaii Cancer Center hit by ransomware attack
Published:
12 January 2026 at 18:48:20
Alert date:
12 January 2026 at 19:01:33
Source:
bleepingcomputer.com
Ransomware & Malware, Data Breach & Exfiltration
The University of Hawaii Cancer Center was hit by a ransomware attack in August 2025. The breach resulted in the theft of data belonging to study participants, including sensitive documents from the 1990s that contained Social Security numbers. This represents a significant data breach affecting healthcare research data and personal information of cancer research participants spanning multiple decades.
Technical details
Ransomware attack occurred on August 31, 2025 at University of Hawaii Cancer Center. Attack affected a single research project without impacting clinical operations. Systems were encrypted causing extensive damage and delaying restoration efforts. Research files were stolen including historical documents from the 1990s containing Social Security numbers. University paid ransom to obtain decryption tool and secure destruction of stolen data. Most affected files contained research data without personal identifiers, but some older files from 1990s contained SSNs used before different identification methods were adopted.
Mitigation steps:
Install endpoint protection software, replace compromised systems, reset passwords, replace firewall software, conduct third-party security audits, engage cybersecurity experts for investigation and recovery, notify affected individuals when contact information is determined
Affected products:
University of Hawaii Cancer Center research systems
Oracle E-Business Suite (EBS)
Related links:
http://www.hawaii.edu/govrel/docs/reports/2026/hrs487n-4_2026_cancer-center-exposure_report_508.pdf
https://www.bleepingcomputer.com/news/security/hawaiian-airlines-discloses-cyberattack-flights-not-affected/
https://www.bleepingcomputer.com/news/security/princeton-university-discloses-data-breach-affecting-donors-alumni/
https://www.bleepingcomputer.com/news/security/harvard-university-discloses-data-breach-affecting-alumni-donors/
https://www.bleepingcomputer.com/news/security/university-of-pennsylvania-confirms-data-stolen-in-cyberattack/
https://www.bleepingcomputer.com/news/security/university-of-pennsylvania-confirms-data-theft-after-oracle-ebs-hack/
https://www.bleepingcomputer.com/news/security/baker-university-data-breach-impacts-over-53-000-individuals/
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.

