On June 24th, Columbia University experienced an hourslong system-wide outage. Its internal email service went down. Students couldn\u2019t log in to the platform where professors post assignments and course materials. Library catalogs went offline. Zoom was unavailable. Every single service that required Columbia\u2019s official authentication service was affected, but maybe most eerily, images of President Donald Trump<\/a> appeared on some screens<\/a> across the campus. During that time, the personal data of at least every person who applied to Columbia between 2019 and 2024<\/a> was stolen. <\/p>\n<\/div>\n It\u2019s not yet clear the full scope of the breach, according to Columbia. But someone claiming to be the hacker almost immediately began shopping that data around, giving 1.6 gigabytes of admissions records \u201cdating back decades\u201d to Bloomberg<\/em>. And that\u2019s supposedly just the tip of the iceberg. The self-identified hacker said they had stolen 460 gigabytes, including 1.8 million Social Security numbers, financial aid package information, and employee pay stubs \u2014 the result of two months burrowing into Columbia\u2019s servers before finally gaining the highest level of access. Bloomberg<\/em> confirmed details of the Columbia data it received with eight current and former students; they were accurate. Millie Wert, a spokesperson for Columbia, referred The Verge<\/em> to the university\u2019s previous<\/a> statements<\/a> on the hack.<\/p>\n<\/div>\n These are three politically motivated hacks of higher education, focused on the admissions process<\/p>\n<\/div>\n<\/div>\n The hack appears to be politically motivated: the purported hacker told Bloomberg<\/em><\/a> as much, saying they stole the data because they wanted to know whether Columbia had continued to engage in \u201caffirmative action,\u201d admissions policies meant to improve opportunities for groups that colleges had once discriminated against, after the practice was barred in 2023 by the Supreme Court.<\/p>\n<\/div>\n The Republican war on affirmative action is part of a broader push to undermine the Civil Rights Act<\/a>, which is barely disguised as attacks on \u201cwokeness\u201d and \u201cDEI.\u201d Shortly after taking office, Trump signed an executive order banning \u201cillegal discrimination,\u201d<\/a> which targeted so-called diversity, equity, and inclusion programs, a fairly broad umbrella of initiatives meant to make sure underrepresented groups don\u2019t face barriers in schools and workplaces. In the broader scheme, the Columbia University hack figures as a wildcat attempt at enforcing the right-wing ideological project of bringing back open racism. <\/p>\n<\/div>\n The attack on Columbia is, in this context, a remarkable story. Moreover, it comes on the heels of cyberattacks on New York University and the University of Minnesota, both of which the alleged hacker took credit for when speaking to Bloomberg<\/em>. In March, someone stole NYU applicants\u2019 personal details, including financial aid, \u201cdating back to at least 1989,\u201d according to Washington Square News<\/em><\/a>. Similarly, in July 2023, someone posted records<\/a> from the University of Minnesota dating to the 1980s, and those records included 7 million Social Security numbers<\/a>.<\/p>\n<\/div>\n According to Bloomberg<\/em>\u2019s source, these are three politically motivated hacks of higher education, focused on the admissions process and containing personal information protected by law. Moreover, the supposed hacker \u2014 who, if we take them at their word, is working alone and has an ax to grind about the supposed favored status of racial minorities in American society \u2014 specifically sought out information about self-reported race and ethnicity, and has now essentially acquired lists of people categorized by race. <\/p>\n<\/div>\n There has been precious little reporting on the Columbia hack<\/p>\n<\/div>\n<\/div>\n And yet, there has been precious little reporting on the Columbia hack. Wired<\/em> hasn\u2019t covered it<\/a>, and, until this story, neither has The Verge.<\/em> Nor have The Chronicle of Higher Education<\/em><\/a>, CyberScoop<\/em><\/a>, <\/em>404 Medi<\/em><\/a>a<\/em>, <\/em>TechCrunch<\/em><\/a>, or <\/em>Krebs on Security<\/em><\/a>. <\/em>These \u2014 including The Verge<\/em> \u2014 are small to medium-size entities, and there\u2019s any number of possible reasons why they didn\u2019t pick it up. (On our end, it was partly because we were short-staffed during a national holiday, and partly because we didn\u2019t immediately piece together how extraordinary this particular hack is.) But coverage at the much bigger, well-resourced institutions is also scanty. The Wall Street Journal<\/em><\/a> passed on the story. Reuters<\/em> has a brief on the initial outage<\/a>; AP<\/em> has a short write-up as well,<\/a> which The Washington Post<\/em><\/a> ran as part of their syndication deal. <\/p>\n<\/div>\n The most extensive reporting comes from Bloomberg <\/em>and The New York Times.<\/em><\/p>\n<\/div>\n Here is how The New York Times<\/em> has elected to cover it:<\/p>\n<\/div>\n For those of us keeping score at home, that\u2019s two stories about the hack and its overall political implications, both of which are less informative than Bloomberg<\/em>; one story using hacked data to smear a mayoral candidate; and two stories jerking off.<\/p>\n<\/div>\n As a result of the Mamdani leak, The New York Times<\/em> has one of the best leads on the identity of the hacker<\/p>\n<\/div>\n<\/div>\n Zohran Mamdani, as a high school senior, marked himself as both Asian and Black\/African American on his college application, adding the clarifying note \u201cUganda\u201d next to the latter, according to hacked data passed to the Times<\/em>. He is a South Asian man born in Uganda. He did not attend Columbia University. <\/p>\n<\/div>\n It\u2019s not much of a story. But as a result of the Mamdani leak, The New York Times<\/em> has one of the best leads on the identity of the hacker. The Times <\/em>identifies Jordan Lasker<\/a> as the source of Mamdani\u2019s college application (though bafflingly only by his internet alias \u201cCr\u00e9mieux<\/a>\u201d), and he likely has some idea about where he got it from. Bloomberg<\/em> obviously has its own lead \u2014 and you\u2019d think the two would be competing to get more information about this politically motivated hack out to the general public. <\/p>\n<\/div>\n Maybe we will see some impressive reporting shortly and someone is chasing it right now. Or perhaps there is simply no one at the Times <\/em>who can report out the story, which now involves three major data breaches. Certainly the handling of Mamdani\u2019s college application<\/a> makes it look like the Times <\/em>is either unfamiliar with or unwilling to engage in best practices around hacked materials. It does, however, strain credulity to think this particular newspaper would be unaware of those standards. <\/p>\n<\/div>\n Had reporters been played by hackers? (Yes.)<\/p>\n<\/div>\n<\/div>\n In 2016, The New York Times<\/em> ran a series of stories about Hillary Clinton\u2019s emails, which had been hosted on a private server \u2014 not recommended, for security reasons \u2014 while she was secretary of state. Following a relentless news cycle about her emails, a Democratic National Committee email server was hacked. WikiLeaks published almost 20,000 stolen emails, notably spending October dropping batches of damaging emails from Clinton\u2019s campaign chair. As early as June 2016, the media already had a pretty good idea<\/a> that the hacker was actually the Russian government<\/a>, but went all out on the emails anyway. (In 2018, a US grand jury indicted 12 Russian intelligence officers<\/a> in connection with the hack.) The extensive coverage of those hacked emails \u2014 from the Times<\/em> and elsewhere \u2014 likely contributed to Clinton\u2019s loss to Donald Trump in the 2016 presidential election<\/a>, even though the emails were nothingburgers. Does anyone even remember the contents?<\/p>\n<\/div>\n Journalists have long struggled over balancing newsworthiness and sourcing \u2014 the 2014 North Korean hack of Sony Pictures produced a spectacular revelation<\/a> about Hollywood\u2019s war on Google, but also gossip intended to humiliate Amy Pascal<\/a>, where reporters played along and effectively did King Jong Un\u2019s bidding. But the WikiLeaks-DNC emails incident led to intense media navel-gazing. Had reporters been played by hackers? (Yes.) Was there a way to avoid that in the future? (Yes.) Journalists seriously reevaluated how to treat hacked materials, and how much emphasis to put on them. <\/p>\n<\/div>\n This is why coverage of the emails from Hunter Biden\u2019s laptop was so muted. And when the Trump \/ Vance presidential campaign of 2024 was hacked, publications were careful about how to cover it. Though reporters at a variety of outlets, including The New York Times<\/em> and The Washington Post<\/em><\/a>, received offers of internal documents, they largely declined to run them. Instead, papers reported on the details of the hack itself, which was allegedly performed by Iranian state actors. A dossier of hacked information on vice presidential nominee JD Vance<\/a> was<\/em> published by independent journalist Ken Klippenstein, though its spread was throttled by X<\/a> because it contained personal information. (Previously, X\u2019s owner, Elon Musk, claimed that the suppression of stories about the Hunter Biden laptop was evidence that conservative speech was being stifled<\/a>.)<\/p>\n<\/div>\n Hackers don\u2019t make journalistic assignments. Journalists do<\/p>\n<\/div>\n<\/div>\n In justifying the coverage decisions around leaked materials, there was a common thread:<\/a> Hackers don\u2019t make journalistic assignments. Journalists do. No news organization \u2014 including this one \u2014 would make a blanket rule against hacked materials. Instead, the idea would be to be judicious about what was being leaked and by who, giving readers information on what the hack was meant to accomplish if the information in it was found to be newsworthy. <\/p>\n<\/div>\n The Times<\/em>\u2019 coverage of the hacked Mamdani material flies in the face of the editorial decisions around Hunter Biden\u2019s emails and the hacked documents from the Trump campaign. The choice to use the material is inconsistent with previous decisions, but that\u2019s not all. The framing of the story might as well have been dictated by the hacker, who has it out for affirmative action, and the internet eugenicist who supplied the material. <\/p>\n<\/div>\n I reached out to The New York Times<\/em> to request comment on how they\u2019d identified the source and framed the story<\/a>. Spokeswoman Danielle Rhoades Ha declined to answer those questions, and sent a statement that read, in part, \u201cReporters receive tips from people with biases and bad motives all the time, but we only publish such information after we\u2019ve independently verified it, confirmed it, done our own reporting on it and judged it to be newsworthy.\u201d<\/p>\n<\/div>\n The context in which these actors are going after Columbia is important as well. The Trump regime has come at the Ivy League broadly over diversity, equity, and inclusion programs. It has singled out Columbia specifically, leveraging accusations of antisemitism over the university\u2019s handling of protests against the Israeli attacks on Gaza. Trump\u2019s ICE has targeted student protesters<\/a>, disappearing them into faraway facilities<\/a>. <\/p>\n<\/div>\n Frankly, we will have gotten off lightly if \u201cMamdani Once Claimed to Be Asian and African American\u201d is the only hit the Columbia hacker manages to land with their stolen data<\/p>\n<\/div>\n<\/div>\n The institution has not exactly been defiant about the attacks on its students \u2014 days after the ICE raid that took Mahmoud Khalil, the university expelled, suspended, or revoked the degrees<\/a> of students who occupied a campus building last spring as part of a protest. This did not pacify the Trump regime, which has frozen $400 million of funding for Columbia University and is currently negotiating a settlement with the university.<\/a> <\/p>\n<\/div>\n The timing of the hack, given the university\u2019s relationship with the Trump regime, raised my eyebrows. A hacker who is also a Trump follower might attempt to pressure Columbia with stolen data, perhaps via strategic leaks to major newspapers, in order to get it to capitulate to Trump\u2019s pressure campaigns. <\/p>\n<\/div>\n Who <\/em>did the hacking and how<\/em> did it happen? What<\/em> was stolen, and where <\/em>is it being stored? Is any of it being sold? What<\/em> other schools are being targeted? How<\/em> will this stolen information place pressure on Columbia? These questions all seem like fertile ground for reporting. It would be nice if The New York Times<\/em> was interested in that <\/em>story. But at the absolute bare minimum, when it ran its bizarre story about Mamdani\u2019s college application, it should have made the political motivations of the hacker clear to the reader.<\/p>\n<\/div>\n If it\u2019s true that the Times<\/em> allowed itself to become the mouthpiece of an anti-affirmative action hacktivist, it is a travesty. But frankly, we will have gotten off lightly if \u201cMamdani Once Claimed to Be Asian and African American\u201d is the only hit the Columbia hacker manages to land with their stolen data. They may well be poised to do much more damage, and at a time when the university has already been brought to its knees. <\/p>\n<\/div>\n There are as yet no indications that the hacker has anything other than admissions data, which is something of a relief, given how much stuff<\/em> there is at any given university. In fact, speaking of journalistic ethics: even though journalism does not have one single body that upholds professional ethics, The Columbia Journalism Review<\/em> \u2014 housed at Columbia University, alongside a renowned journalism school and the prestigious Pulitzer Prizes \u2014 is widely acknowledged as a leading institution in setting and guiding norms in the profession. One might think of the Columbia hack as an indirect attack on journalists and journalistic institutions; it is possible the hacker has data that could be weaponized in a direct one. <\/p>\n<\/div>\n I am struggling to understand why I can find so little reporting on something that seems awfully<\/em> newsworthy. Look, I\u2019m the in-house finance nerd at the phones website; I rely on people who know how computers work to do reporting on hacks. But here we have a politically motivated hack of three universities, data from which has been used by the nation\u2019s most prestigious newspaper to attempt a hit job on a Democratic mayoral candidate, and precious little else. I get that we all have hacking fatigue \u2014 it feels like every other week, some major business gets rekt \u2014 but the Columbia University story is different. Is anyone going to treat it that way?<\/p>\n<\/div>\n