Princeton University Data Breach Lawsuit: Filed, Consolidated, Dropped
Case Dismissed
Claim deadline was February 12, 2026 · as of Oct 19, 2026
The Princeton University data breach in the news hit the University Advancement database — the alumni and donor records — on November 10, 2025, after a phone phishing call to an employee. Three class actions followed in federal court in New Jersey. The plaintiffs dropped them in February 2026. As of October 2026 there is no settlement, no fund, no claim form and no deadline.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
Can I Still File?
The claim deadline, what the settlement pays and where to file — plus other settlements still taking claims.
No. The claim deadline was February 12, 2026.
Other settlements with open claim windows
- SitusAMC Data Breach$5.3M · claim by November 6, 2026
- Kelly Benefits Data Breach$5 million · claim by December 28, 2026
- Wellstar MyChart Lawsuit$4.25M · claim by November 10, 2026
We are not a claims administrator and not affiliated with any settlement. File only at the official settlement website — filing is always free.
What Happened and What the Lawsuits Claimed
According to Princeton, outside actors reached the University Advancement database on November 10, 2025 by phone-phishing a university employee who had access to it. The university said it removed the attackers within 24 hours and believes no other Princeton system was compromised. It emailed everyone with a valid address in the database on November 15, 2025.
The database holds names, email addresses, phone numbers, home and business addresses and records of fundraising and donations. Princeton said it generally does not hold Social Security numbers, passwords, or card and bank account numbers.
The lawsuits alleged that Princeton failed to use basic safeguards, that it kept the data in “an unencrypted and identifiable form,” and that concentrating so much biographical data in one place made targeted scams easy. They pleaded negligence, breach of implied contract and unjust enrichment. Princeton called the claims “without merit” and said it would contest them vigorously.
Case details
All three cases were in the U.S. District Court for the District of New Jersey: Ramirez v. Princeton University, No. 3:25-cv-17654, and Cai v. Princeton University, No. 3:25-cv-17684, both filed November 18, 2025, and Penna v. Princeton University, No. 3:25-cv-17854, filed November 24, 2025.
On December 9, 2025 Judge Robert Kirsch consolidated them, with Ramirez as the lead case. Docket listings show a consolidated amended complaint on January 8, 2026 and a pre-motion letter from Princeton about a planned motion to dismiss under Rules 12(b)(1) and 12(b)(6).
Status: Voluntarily Dismissed, No Settlement
As of October 2026 there is no settlement, no fund, no administrator, no claim form and no deadline, and no court ever certified a class. “Without prejudice” means the claims could in principle be filed again; we found no refiled case. We could not open the full docket ourselves, so the dismissal dates come from the court docket summary rather than the order itself.
Who Was in the Database
Princeton said everyone in these groups should assume some information about them is in the Advancement database: all alumni, their spouses and partners, widows and widowers of alumni, any donor, parents of current and past students, current students, and current and past faculty and staff. One plaintiff put the number at more than 100,000 people; Princeton has not published a count.
Being in the database does not entitle you to anything now. The proposed classes were never certified and the suits were dropped, so there is no group to join and nothing to sign. If you received the November 15, 2025 email, keep it.
Is There Any Money?
The data matters for what it is. By Princeton's account the database generally held no Social Security numbers or bank details, so this is mainly a targeted-scam risk: a caller who knows your class year, address and giving history sounds convincing. For what settlements in breaches that did expose Social Security numbers have paid, see the data breach settlement calculator; for live claim deadlines, see open class action settlements.
How cases like this one end
Our copy of the federal courts’ own case database covers 129,730 other contract casesclosed in U.S. federal district courts between 2015 and 2026, 6% of them filed as class actions:
- 30.7% ended in a settlement recorded by the court. Another 20.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 30.7% and 50.9%.
- 7.5% were decided on a motion before any trial.
- 1 in 72 reached a trial (1.4%), after a median of 29.3 months.
- Median time from filing to the end of the case: 7.6 months.
- Only 7,691 of them (5.9%) record a money award at all; the median of those is $407,000.
These are base rates for this type of case (federal other contract cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Princeton Breach Timeline
November 10, 2025 — Advancement Database Breached
Outside actors reach the alumni and donor database after phone-phishing an employee. Princeton says it blocked them within 24 hours.
November 15, 2025 — Notice by Email
Princeton emails everyone with a valid address in the database and warns of follow-on phishing.
November 18 and 24, 2025 — Three Class Actions
Ramirez (3:25-cv-17654) and Cai (3:25-cv-17684) are filed November 18; Penna (3:25-cv-17854) follows November 24, all in New Jersey federal court.
December 9, 2025 — Consolidated
Judge Robert Kirsch combines the three suits under the lead case, Ramirez v. Princeton University.
February 2026 — Plaintiffs Drop the Case
Notice of voluntary dismissal without prejudice filed February 12, 2026; order signed February 17, 2026. No settlement.
May 7, 2026 — Separate Canvas Breach
Princeton's Canvas goes dark after a criminal group claims to have hacked Instructure. This is a different incident, not part of the Princeton suits.
Three Things to Watch For
The leaked data is exactly what a convincing fake Princeton contact needs:
Calls “from Princeton Advancement”
The breach itself started with a phone call. Princeton says no one from the university will call, text or email asking for Social Security numbers, passwords or bank information. Hang up and call the number on princeton.edu.
Fake gift and pledge requests
Someone who knows your class year, address and past gifts can ask for a donation by wire, gift card or new bank link. Give only through channels you reach yourself.
“Princeton settlement” claim pages
There is no settlement and no claims site. A page asking for your Social Security number or a fee to “claim your share” of a Princeton data breach payout is collecting data, not filing anything.
Princeton University Data Breach — Questions People Ask
Short answers to the questions people ask most about this case.
Is there a Princeton University data breach settlement?
No. As of October 2026 there is no settlement, no fund, no claim form and no deadline. The three class actions were voluntarily dismissed by the plaintiffs in February 2026.
What happened in the Princeton University data breach?
On November 10, 2025, outside actors reached the University Advancement database after a phone phishing attack on an employee. Princeton says it removed them within 24 hours and notified people by email on November 15, 2025.
What data was exposed?
Princeton said the database holds names, email addresses, phone numbers, home and business addresses and fundraising and donation records, and generally no Social Security numbers, passwords or card and bank numbers. On November 18, 2025 it said it did not know precisely what was viewed or taken.
Who was affected?
Potentially all alumni, their spouses, partners and widowed partners, donors, parents of current and past students, current students, and current and past faculty and staff. One lawsuit put the figure at more than 100,000 people.
Why was the Princeton lawsuit dismissed?
The plaintiffs withdrew it themselves; no judge ruled on the merits. The notice was filed February 12, 2026, after Princeton had signaled a motion to dismiss. The filings we could see give no reason, and we found no announced deal.
Can someone still sue?
The dismissal was without prejudice, so the claims were not decided and could in principle be brought again. We found no refiled case as of October 2026. Any individual question is one for a licensed attorney.
Is the Canvas breach the same thing?
No. On May 7, 2026, Princeton's Canvas went down after a criminal group claimed to have hacked Instructure, which runs Canvas for thousands of schools. Princeton said that data possibly included names, email addresses, student ID numbers and Canvas messages. Lawsuits over it are covered on our Canvas data breach lawsuit page.
What is worth doing right now?
Treat any unexpected call, text or email that knows your Princeton history with suspicion, and never give out passwords or bank details. A credit freeze is free and reversible if you want extra protection. Other university breach cases are covered on our University of Hawaii and University of Phoenix pages.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Canvas Data Breach LawsuitThe separate May 2026 Instructure breach that also hit Princeton
- Monroe University Data BreachAnother university breach where plaintiffs dropped their suits
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Open Class Action SettlementsSettlements currently accepting claims, with deadlines